Which of the following describes the direction of the challenges issued when establishing a wireless (IEEE 802.11) connection?

The client alone challenging the AP is not a defined mode in 802.11 security; the AP always plays an active role in verifying and authenticating the connecting client.

One-way AP-to-client challenge describes the deprecated WEP Shared Key Authentication model, which has been superseded by mutual authentication mechanisms in current 802.11 standards.

Claiming no challenges occur is incorrect; every 802.11 security mode - from legacy WEP Open System to modern WPA3 - involves at least one authentication exchange between the client and the access point.

In WPA2, the four-way handshake exchanges nonces in both directions - the AP sends ANonce and the client sends SNonce - and each side computes and verifies a Message Integrity Code, requiring both parties to prove knowledge of the Pairwise Master Key without exposing it. WPA2-Enterprise with EAP-TLS and WPA3 with SAE further enforce certificate-based or password-based mutual verification, making bidirectional challenge-response a fundamental property of the 802.11 security architecture.