GPEN · Question #47
Which of the following can be used to mitigate the evil twin phishing attack?
The correct answer is D. IPSec VPN. An IPSec VPN encrypts all traffic end-to-end, so even if a user connects to a rogue evil twin access point, intercepted data remains unreadable to the attacker.
Question
Which of the following can be used to mitigate the evil twin phishing attack?
Options
- ASARA
- BObiwan
- CMagic Lantern
- DIPSec VPN
How the community answered
(38 responses)- A5% (2)
- B3% (1)
- C13% (5)
- D79% (30)
Why each option
An IPSec VPN encrypts all traffic end-to-end, so even if a user connects to a rogue evil twin access point, intercepted data remains unreadable to the attacker.
SARA (Security Auditor's Research Assistant) is a network vulnerability scanning tool used for auditing, not a countermeasure against rogue access points.
Obiwan is a network monitoring tool, not a defense mechanism against evil twin phishing attacks.
Magic Lantern is an FBI keystroke-logging tool used for law enforcement surveillance and is unrelated to wireless attack mitigation.
An evil twin attack sets up a rogue wireless access point mimicking a legitimate one to perform a man-in-the-middle interception of client traffic. Using an IPSec VPN ensures all transmitted data is encrypted and authenticated at the network layer, rendering intercepted packets unintelligible to the attacker and preventing credential or session theft regardless of which AP the client connects through.
Concept tested: Mitigating evil twin rogue AP attack with VPN encryption
Source: https://www.cisa.gov/sites/default/files/publications/aa21-265a-avoiding-the-temptation-of-evil-twin-networks.pdf
Topics
Community Discussion
No community discussion yet for this question.