nerdexam
CompTIA

PT0-002 · Question #599

An attacker chooses a busy location that has free Wi-Fi with the goal of stealing credit card information. Which of the following actions should the attacker do next to perform an evil twin attack?

The correct answer is D. Set up a Wi-Fi access point. To perform an evil twin attack, the attacker's immediate next step after selecting a location is to set up a rogue Wi-Fi access point that mimics a legitimate public network. This creates the "evil twin" to which unsuspecting users will connect.

Attacks and Exploits

Question

An attacker chooses a busy location that has free Wi-Fi with the goal of stealing credit card information. Which of the following actions should the attacker do next to perform an evil twin attack?

Options

  • AMonitor the user's data.
  • BCreate a strong signal.
  • CSend deauthentication packages.
  • DSet up a Wi-Fi access point.

How the community answered

(18 responses)
  • B
    6% (1)
  • D
    94% (17)

Why each option

To perform an evil twin attack, the attacker's immediate next step after selecting a location is to set up a rogue Wi-Fi access point that mimics a legitimate public network. This creates the "evil twin" to which unsuspecting users will connect.

AMonitor the user's data.

Monitoring user data is a consequence and goal of an evil twin attack, but it only happens after users connect to the rogue access point.

BCreate a strong signal.

While creating a strong signal can help attract users, the fundamental step is establishing the rogue access point itself, which naturally entails a signal.

CSend deauthentication packages.

Sending deauthentication packets can be used to force users off a legitimate AP and onto the evil twin, but setting up the evil twin AP is the prerequisite for this step.

DSet up a Wi-Fi access point.Correct

An evil twin attack involves setting up a rogue Wi-Fi access point that has the same SSID (network name) as a legitimate or commonly expected public Wi-Fi network. Users then unknowingly connect to the attacker's AP, allowing the attacker to intercept their traffic.

Concept tested: Evil twin attack methodology

Topics

#Evil Twin Attack#Wireless Attacks#Access Point

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice