nerdexam
GIAC

GPEN · Question #322

You have detected what appears to be an unauthorized wireless access point on your network. However this access point has the same MAC address as one of your real access points and is broadcasting wit

The correct answer is C. The evil twin attack. An evil twin attack is a rogue wireless access point that spoofs the MAC address of a legitimate AP and broadcasts at a higher power to lure clients into connecting to it instead.

Exploitation & Post-Exploitation Techniques

Question

You have detected what appears to be an unauthorized wireless access point on your network. However this access point has the same MAC address as one of your real access points and is broadcasting with a stronger signal. What is this called?

Options

  • ADOS
  • BBuesnarfing
  • CThe evil twin attack
  • DWAP cloning

How the community answered

(54 responses)
  • A
    2% (1)
  • B
    13% (7)
  • C
    80% (43)
  • D
    6% (3)

Why each option

An evil twin attack is a rogue wireless access point that spoofs the MAC address of a legitimate AP and broadcasts at a higher power to lure clients into connecting to it instead.

ADOS

A DoS (Denial of Service) attack aims to make a resource unavailable, not to impersonate a legitimate access point and intercept traffic.

BBuesnarfing

Bluesnarfing is a Bluetooth-specific attack that exploits OBEX push protocol vulnerabilities to steal data from Bluetooth-enabled devices, unrelated to Wi-Fi AP impersonation.

CThe evil twin attackCorrect

The evil twin attack involves an attacker deploying a rogue AP configured with the same SSID and MAC address as a legitimate AP, then broadcasting at a stronger signal strength so clients automatically prefer and associate with it. This enables man-in-the-middle interception of all wireless traffic from deceived clients, making it a significant Wi-Fi credential and data theft vector.

DWAP cloning

WAP cloning is not a recognized standard attack term - the specific combination of MAC spoofing plus stronger signal broadcasting to deceive clients is precisely what defines the evil twin.

Concept tested: Evil twin rogue access point Wi-Fi attack

Source: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/68583-wlan-security.html

Topics

#evil twin attack#rogue access point#MAC spoofing#wireless attacks

Community Discussion

No community discussion yet for this question.

Full GPEN Practice