An attacker is attempting to gain unauthorized access to a WiR network that uses WPA2-PSK Which of the following attack vectors would the attacker MOST likely use?

A three-way handshake belongs to TCP session establishment and has no role in WPA2 authentication; cracking it yields no wireless key material.

Physically capturing a mobile device is a separate, unrelated attack that does not target the WPA2-PSK network protocol itself.

A rogue access point is an evil-twin attack aimed at intercepting traffic or harvesting credentials via a captive portal, not at cracking the WPA2-PSK key through handshake analysis.

WPA2-PSK uses the IEEE 802.11i four-way handshake to authenticate clients and establish session keys. An attacker can capture this handshake passively or by forcing a client to re-authenticate via deauthentication frames, then perform an offline dictionary or brute-force attack against the captured EAPOL frames to recover the pre-shared key.