What makes the WPS method of PIN entry authentication with a hard$-$coded pin vulnerable to online brute force attacks?

$0/1$ point

It uses an $8$ digit pin that is made of $7$ digits and one checksum value. This means it takes a maximum of $10,000,000$ tries to guess the PIN.

It uses an $8$ digit PIN, which is made of $7$ digits and one checksum value, and sends it in two parts. This means it takes a maximum of $11,000$ tries to guess the PIN.

There is a one$-$minute lockout period after three incorrect PIN attempts.

It allows for the secure exchange of the SSID and the pre$-$shared key.