You are a cybersecurity consultant for a major airport that offers free Wi-Fi to travelers. The management is concerned about the possibility of "Evil Twin" attacks, where a malicious actor sets up…

Regularly changing the SSID would severely disrupt the user experience, as travelers would constantly need to locate and reconnect to a new network, and it does not prevent an attacker from mimicking the current SSID.

Using MAC address filtering is impractical for a public Wi-Fi network serving a large, transient population like an airport, as it would require manual registration for every device and can be bypassed by MAC address spoofing.

Implementing WPA3 encryption, while enhancing the security of legitimate connections, does not inherently prevent an Evil Twin attack where a rogue AP mimics the legitimate network's SSID to trick users into connecting; furthermore, WPA3-Enterprise, which offers stronger authentication, typically requires client-side configuration or credential management that would violate the 'no additional software' constraint.

Displaying a captive portal page that warns users about Evil Twin attacks effectively educates travelers about the threat without requiring them to install additional software. While not directly preventing the rogue AP, it empowers users to identify and avoid connecting to malicious networks, which is a practical and user-friendly defense for a public, free Wi-Fi service. Captive portals are a standard part of the public Wi-Fi user experience, so adding a warning message has minimal impact.