Ann, a user, connects to her company's secured wireless network in the conference room when attending meetings. While using the conference room this morning, Ann notices an unsecured wireless…

A rogue access point is an unauthorized AP added to a network without admin approval, but it does not necessarily mimic an existing SSID - the defining characteristic here is the SSID duplication.

ARP poisoning is a Layer 2 attack where an attacker sends forged ARP replies to associate their MAC address with a legitimate IP, which is unrelated to wireless SSID spoofing.

A replay attack involves capturing and retransmitting valid authentication credentials or packets to gain unauthorized access, which is not what is described in this scenario.

An evil twin is a malicious access point configured with the same SSID (and often the same BSSID appearance) as a trusted network, designed to deceive users into connecting. Because Ann's laptop connected to an unsecured network bearing her company's exact network name, an attacker is impersonating the legitimate AP. Once connected, the attacker can intercept all of Ann's unencrypted traffic.