Given: ABC Company has a WLAN controller with three access points, 15 client devices, and uses WPA2-Personal for WLAN security.

What statement about ABC Company’s WLAN security is true?

A.
Intruders may obtain the passphrase with an offline dictionary attack and gain network access, but will be unable to decrypt data traffic.

B.
Traffic injection attacks are possible because the transmitter lacks frame numbering.

C.
An unauthorized wireless client device cannot associate, but can eavesdrop on some data because WPA2-Personal does not encrypt broadcast traffic.

D.
An authorized WLAN user with a protocol analyzer can decode data frames of other authorized users if he captures that user’s 4-Way Handshake.

E.
Because WPA2-Personal uses Open System authentication followed by a 4-Way Handshake, hijacking attacks are easily performed.