Employees report connecting to the company’s Wi-Fi but experiencing unusual redirects and connection issues. Investigation reveals the devices were connecting to a second access point with the same SSID as the corporate network. Which type of attack is occurring in this scenario?

Rationale

Evil twin

In this scenario, the presence of a second access point with the same SSID as the corporate network indicates that an attacker has set up a rogue access point that mimics the legitimate one. This type of attack, known as an evil twin attack, deceives users into connecting to the malicious network, allowing the attacker to intercept or manipulate network traffic.

A (ICMP flood) YOUR ANSWER

An ICMP flood is a type of denial-of-service attack where an attacker overwhelms a target with ICMP Echo Request (ping) packets, causing network congestion. This does not relate to the issue of users connecting to a misleading access point but rather focuses on disrupting services by flooding a network with traffic, making it irrelevant to the described scenario.

B (Evil twin) CORRECT

This is the correct answer as it describes an attack where a rogue access point presents the same SSID as a legitimate network. Unsuspecting users connect to this fake access point, leading to potential data interception or manipulation. This attack exploits users' trust in familiar network names, making it particularly effective in public or corporate environments.

C (Broken authentication) YOUR ANSWER

Broken authentication refers to vulnerabilities that allow attackers to compromise user accounts or sessions by exploiting weak authentication protocols. While this can lead to unauthorized access, it does not directly explain the connection issues arising from users inadvertently connecting to a rogue access point with the same SSID.

D (War chalking) YOUR ANSWER

War chalking is the practice of marking locations to indicate the presence of wireless networks. It does not involve any active attacks or manipulation of network traffic and is not related to the scenario where users are experiencing connection issues due to an evil twin access point.

Conclusion

The phenomenon described in the scenario is indicative of an evil twin attack, where a malicious access point mimics a legitimate network to deceive users. This attack exploits the trust users have in familiar network names, resulting in unusual redirects and connection issues. Understanding this threat is crucial for maintaining network security and protecting sensitive information within corporate environments.

Employees report connecting to the company’s Wi-Fi but experiencing unusual redirects and connection issues. Investigation reveals the devices were connecting to a second access point with the same SSID as the corporate network. Which type of attack is occurring in this scenario?

Evil twin

Related Questions

Related Quizzes

How familiar were you with this question?

Report an Issue

Rate this Practice Test