Certified Ethical Hacker (CEH) Practice Question

The PMKID attack requests or passively collects Robust Security Network (RSN) management or EAPOL frames that some access points transmit containing a PMKID value. Hcxdumptool is built to capture these frames without requiring any client association, and hcxpcapngtool converts the resulting pcapng file directly into a hashcat-ready hash (mode 22000). Aireplay-ng and airodump-ng can record conventional four-way handshakes but cannot, by themselves, extract PMKIDs; Reaver and Bully target WPS PIN brute-forcing; and while Kismet with Tshark can log traffic, they lack the dedicated PMKID-to-hashcat conversion workflow provided by the hcx tools.