Exam SY0-601 topic 1 question 254 discussion

Same ESSID (SSID) and BSSID (MAC address) = evil twin

In an evil twin attack, an attacker sets up a rogue wireless access point that impersonates a legitimate access point (the corporate ESSID in this case) with the same Service Set Identifier (SSID) and Basic Service Set Identifier (BSSID). The rogue access point is typically set to use the same or similar channel as the legitimate access point to further deceive users and force them to connect to the rogue network. The goal of the evil twin attack is to trick users into connecting to the rogue access point, which allows the attacker to intercept sensitive information, perform man-in-the-middle attacks, and potentially gain unauthorized access to the network. In the scenario described, the presence of access points with the same ESSID, BSSID, and running on all available channels indicates that an evil twin attack is being carried out on the corporate wireless network. The security administrator should take immediate action to identify and remove the rogue access point to prevent further security risks.

Same SSID = Evil twin

This is Evil twin. In short: Rogue access point: Unauthorized AP, and has different SSID (and not necessary used for hacking, sometimes employees bring a WiFi AP to work, similar to shadow IT) Evil Twin: Same SSID

Rogue Twin and Evil Twin are basically the same thing anyways. B

Answer: Evil Twin Evil twin attacks are a type of Man in the Middle (MitM) attack in which a fake Wi-Fi network is set up to steal information or further infiltrate a connecting device. This is often done in public settings where people are most likely to look for or connect to freely available Wi-Fi. The evil twins here is the access points with the same SSID as the legitimate access points.

https://www.professormesser.com/security-plus/sy0-501/rogue-access-points/

B is the answer

B Correct https://security.stackexchange.com/questions/152816/whats-the-difference-between-an-evil-twin-and-a-rogue-access-point

Shouldn’t this be D?