GSEC · Question #139
An employee attempting to use your wireless portal reports receiving the error shown below. Which scenario is occurring?
The correct answer is D. Another access point is attempting to intercept the data. A security or certificate warning on a wireless captive portal typically signals an evil twin rogue access point presenting an invalid certificate while attempting to intercept traffic.
Question
An employee attempting to use your wireless portal reports receiving the error shown below. Which scenario is occurring?
Exhibit
Options
- AA denial-of-service attack is preventing a response from the portal.
- BAnother access point is deauthenticating legitimate clients.
- CThe encrypted data is being intercepted and decrypted.
- DAnother access point is attempting to intercept the data.
How the community answered
(46 responses)- A11% (5)
- B2% (1)
- C7% (3)
- D80% (37)
Why each option
A security or certificate warning on a wireless captive portal typically signals an evil twin rogue access point presenting an invalid certificate while attempting to intercept traffic.
A denial-of-service attack would block all responses entirely rather than allow a client to reach a portal and receive a specific error message.
A deauthentication attack forcibly disconnects clients from the network at the 802.11 layer and would not produce a portal-level error visible in a browser.
Passive interception and offline decryption of already-captured encrypted data occurs silently and does not cause the client to receive a real-time visible error during the connection attempt.
An evil twin attack involves a rogue access point mimicking a legitimate one to position itself as a man-in-the-middle; when a client connects and reaches the HTTPS portal, the rogue AP cannot present the legitimate SSL certificate, triggering a certificate mismatch or trust error in the browser. This specific portal-level error is a direct indicator of a rogue AP interception attempt rather than a passive or volumetric attack.
Concept tested: Evil twin rogue AP certificate warning identification
Source: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/wifi/wireless-security-scenarios
Topics
Community Discussion
No community discussion yet for this question.