During a wireless penetration test, a tester detects an access point using WPA2 encryption. Which of the following attacks should be used to obtain the key?

WPA2 uses a 4-way handshake during client authentication that can be captured passively with tools like airodump-ng. The captured handshake contains enough cryptographic material to perform offline dictionary or brute-force attacks using tools such as aircrack-ng or hashcat, making this the standard and effective WPA2 cracking methodology in penetration testing.

inSSIDer is a Wi-Fi network scanner used to detect and analyze nearby networks, not a password cracking tool, and cannot crack WPA2 using an ESSID alone.

WPA2 being IEEE 802.11i compliant does not make it immune to cracking - offline attacks against captured 4-way handshakes are a well-documented and viable attack vector.

Spoofing a MAC address changes a device's hardware identifier but does not assist in decrypting WPA2 encryption or recovering the pre-shared key.