Which wireless access control attack allows the attacker to set up a rogue access point outside the corporate perimeter and lure employees to connect to it?

Which wireless access control attack allows the attacker to set up a rogue access point outside the corporate perimeter and lure employees to connect to it?

• A. War driving
• B. Rogue access points
• C. MAC spoofing
• D. Client mis-association

Answer: (D)

This question targets rogue access point attacks, also known as evil twin attacks. An attacker places an unauthorized wireless AP, often outside the organizational perimeter, that uses the same or a very similar SSID as the legitimate network. When employees unknowingly connect to this rogue AP, the attacker can monitor traffic, capture credentials, or inject malicious content. The key idea is the AP itself being rogue and serving as the lure. War driving describes the act of driving around to discover wireless networks; it’s about discovery, not about attracting users to a fake network. MAC spoofing involves impersonating another device’s hardware address, which can aid various attacks but doesn’t by itself create a fraudulent AP to entice users. Client mis-association is when a client is redirected to a different AP (often after being deauthenticated from the legitimate one), which is related to the technique of luring users but describes a consequence rather than the core setup of a rogue AP. The scenario given—setting up a rogue AP outside the perimeter to lure employees—maps most directly to the rogue access point concept.

This question targets rogue access point attacks, also known as evil twin attacks. An attacker places an unauthorized wireless AP, often outside the organizational perimeter, that uses the same or a very similar SSID as the legitimate network. When employees unknowingly connect to this rogue AP, the attacker can monitor traffic, capture credentials, or inject malicious content. The key idea is the AP itself being rogue and serving as the lure.

War driving describes the act of driving around to discover wireless networks; it’s about discovery, not about attracting users to a fake network. MAC spoofing involves impersonating another device’s hardware address, which can aid various attacks but doesn’t by itself create a fraudulent AP to entice users. Client mis-association is when a client is redirected to a different AP (often after being deauthenticated from the legitimate one), which is related to the technique of luring users but describes a consequence rather than the core setup of a rogue AP. The scenario given—setting up a rogue AP outside the perimeter to lure employees—maps most directly to the rogue access point concept.