Examkin

Question

Difficulty: EasyTroubleshooting Mobile OS Security and Connectivity Issues

A smartphone user connects to an unencrypted public wireless network and immediately receives repeated untrusted certificate warnings while attempting to visit secure enterprise websites. Which of the following is the most likely cause of these warnings?

  1. The mobile device connected to a rogue access point attempting a man-in-the-middle attack.Answer
  2. B
    The local cellular carrier is experiencing a temporary tower outage in the user's area.
  3. C
    The mobile operating system automatically disabled WPA2-Enterprise network authentication.
  4. D
    A recently updated mobile app altered the operating system's internal 64-bit architecture permissions.

Answer

The mobile device connected to a rogue access point attempting a man-in-the-middle attack.
The correct option identifies a rogue access point carrying out a man-in-the-middle attack. When an unauthorized access point intercepts encrypted web traffic, it presents invalid or self-signed certificates to the client device, triggering browser warnings.

Step-by-Step Solution

1
Analyze the reported symptom and trigger environment.
The user is connected to an open public Wi-Fi network and experiencing browser certificate warnings on HTTPS websites.
Public open Wi-Fi networks present high risks for wireless spoofing and unauthorized traffic interception.
2
Evaluate the technical cause of untrusted certificate alerts.
An attacker operating an Evil Twin or rogue access point is intercepting web traffic and proxying SSL/TLS connections using self-signed or invalid certificates.
Browsers flag certificates as untrusted when the issuer domain or CA signature does not match the requested website.

Key Concept

Rogue Access Points and Man-in-the-Middle Attacks
Rate this question

Topics

Troubleshooting Mobile OS Security and Connectivity Issues

More questions from this topic