Victor wants to use Wireless Zero Configuration (WZC) to establish a wireless network connection using his computer running on Windows XP operating system. Which of the following are the most likely…

An attacker can deploy a rogue access point broadcasting the SSID of a trusted network with a high-power antenna, causing WZC to automatically associate with it, exposing the user to man-in-the-middle attacks and credential theft. Because WZC selects networks based on remembered SSIDs and signal strength without mutual authentication, it cannot distinguish a legitimate AP from an evil twin.

WZC continuously broadcasts probe request frames containing the SSIDs of all stored preferred networks, and any nearby attacker running a wireless packet analyzer can passively capture these frames. The captured SSID list can then be used to craft targeted rogue AP attacks or to map the user's network habits.

A Ping Flood DoS attack is a generic ICMP-based attack unrelated to WZC; using WZC does not introduce any additional vulnerability to ICMP flood attacks.

WZC does support configuration of wireless encryption such as WEP and WPA as well as MAC filtering, so the claim that it prevents these security configurations is factually incorrect.