nerdexam
GIAC

GSNA · Question #131

You have detected what appears to be an unauthorized wireless access point on your network. However this access point has the same MAC address as one of your real access points and is broadcasting…

The correct answer is B. The evil twin attack. In the evil twin attack, a rogue wireless access point is set up that has the same MAC address as one of your legitimate access points. That rogue WAP will often then initiate a denial of service attack on your legitimate access point making it unable to respond to users, so…

Network & Perimeter Auditing

Question

You have detected what appears to be an unauthorized wireless access point on your network. However this access point has the same MAC address as one of your real access points and is broadcasting with a stronger signal. What is this called?

Options

  • ABuesnarfing
  • BThe evil twin attack
  • CWAP cloning
  • DDOS

How the community answered

(68 responses)
  • A
    3% (2)
  • B
    84% (57)
  • C
    9% (6)
  • D
    4% (3)

Explanation

In the evil twin attack, a rogue wireless access point is set up that has the same MAC address as one of your legitimate access points. That rogue WAP will often then initiate a denial of service attack on your legitimate access point making it unable to respond to users, so they are redirected to the 'evil twin'. Answer: A is incorrect. Blue snarfing is the process of taking over a PDA. Answer: D is incorrect. A DOS may be used as part of establishing an evil twin, but this attack is not specifically for denial of service. Answer: C is incorrect. While you must clone a WAP MAC address, the attack is not called WAP

Topics

#evil twin attack#rogue access point#MAC spoofing#wireless security

Community Discussion

No community discussion yet for this question.

Full GSNA Practice