After viewing wireless traffic, an attacker notices the following networks are being broadcasted by local access points: Corpnet Coffeeshop FreePublicWifi Using this information the attacker spoofs…

The correct answer is C. Evil twin. An evil twin attack occurs when an attacker sets up a rogue wireless access point that impersonates a legitimate one by broadcasting the same SSID (network name). Because wireless clients store previously connected networks and automatically probe for them, the attacker listens…

Threats, vulnerabilities, and mitigations

Question

After viewing wireless traffic, an attacker notices the following networks are being broadcasted by local access points:

Corpnet Coffeeshop FreePublicWifi Using this information the attacker spoofs a response to make nearby laptops connect back to a malicious device. Which of the following has the attacker created?

Options

AInfrastructure as a Service
BLoad balancer
CEvil twin
DVirtualized network

How the community answered

(20 responses)

A
5% (1)
B
5% (1)
C
90% (18)

Explanation

An evil twin attack occurs when an attacker sets up a rogue wireless access point that impersonates a legitimate one by broadcasting the same SSID (network name). Because wireless clients store previously connected networks and automatically probe for them, the attacker listens for these probe requests and spoofs a response - making nearby devices believe the malicious AP is the real Corpnet, Coffeeshop, or FreePublicWifi network. Once connected, the attacker can intercept all traffic (man-in-the-middle). This is distinct from a load balancer (traffic distribution), IaaS (cloud infrastructure model), or a virtualized network (software-defined networking), none of which describe this wireless impersonation technique.

Topics

#evil twin#wireless attacks#AP spoofing#rogue access point

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice