Examkin

Soru

Zorluk: KolayNetwork and Wireless Attack Indicators

During a routine wireless site survey, a technician discovers a rogue wireless access point broadcasting the exact same Service Set Identifier (SSID) as the corporate network, but transmitting with a different basic service set identifier (BSSID) and higher signal strength to intercept client authentication traffic. Which of the following attack types is indicated by these symptoms?

  1. Evil TwinCevap
  2. B
    Radio Frequency Jamming
  3. C
    Initialization Vector (IV) Attack
  4. D
    MAC Flooding

Cevap

An Evil Twin attack is indicated when an unauthorized rogue access point broadcasts the legitimate corporate network's SSID with stronger signal strength to lure clients.
An Evil Twin is a rogue access point that masquerades as a legitimate Wi-Fi access point by duplicating its SSID. Devices configured to connect automatically to the corporate SSID will connect to the rogue access point if its signal is stronger.

Adım Adım Çözüm

1
Analyze the observed indicators
The indicator shows a rogue wireless access point broadcasting a matching SSID with a different BSSID and higher signal strength.
Attacker rogue APs impersonate legitimate networks by copying the network name (SSID) to capture user credentials or conduct on-path attacks.
2
Match the indicators to the corresponding attack pattern
Impersonation of a wireless network SSID using a rogue access point is defined as an Evil Twin attack.
Clients configured to auto-connect to known SSIDs will connect to the stronger rogue signal.

Anahtar Kavram

Evil Twin attack identification and indicators
Tahmini Süre:45s
Bu soruyu puanla

Konular

Network and Wireless Attack Indicators

Bu konudan daha fazla soru