Proves knowledge of the PMK → Exchanges messages for PTK → Distributes encrypted GTK → Sets IV. That's the typical WPA 4-way handshake flow from Aruba guides and CWNP material. Some mix up PTK exchange before proving PMK due to how Message 1/2 are labeled, but proving PMK actually kicks everything off. I think this order is correct, unless they're asking about a rekey scenario which could change things.

Yeah this matches what I've mostly seen in study guides. The correct order should be: Proves knowledge of the PMK, Exchanges messages for generating PTK, Distributes encrypted GTK to the client, then Sets first initialization vector (IV). Pretty sure that's how the WPA handshake logic flows. If anyone has seen a variation in a different context, let me know!

Nah, I don’t think "Distributes GTK" comes before "Sets IV". In the real WPA 4-way handshake, it’s: first prove PMK knowledge, then generate PTK, after that distribute encrypted GTK, and finally set the IV. That’s what I’ve seen in official study material-trap is swapping steps 3 and 4.