A network technician needs to connect a new user to the company’s Wi-Fi network called SSID: business. When attempting to connect, two networks are listed as possible choices: SSID: business and SSID: myaccess. Which of the following attacks is occurring?

The scenario describes the presence of an unauthorized wireless access point broadcasting the SSID myaccess within the company's physical location. A rogue access point (AP) is any wireless AP installed on a network without the network administrator's explicit authorization. The appearance of this unknown SSID indicates a potential rogue device. This device could be connected to the corporate network, creating an unsecured backdoor, or it could be a standalone device intended to lure users. In either case, it represents an unauthorized, or rogue, access point.

A. On-path: This attack involves intercepting traffic between two parties. While a rogue AP can be used to facilitate an on-path attack, the attack described is the presence of the unauthorized AP itself.
C. Evil twin: An evil twin is a specific type of rogue AP that impersonates a legitimate network by broadcasting the exact same SSID (in this case, business) to trick users into connecting to it.
D. Tailgating: This is a physical security breach where an unauthorized person follows an authorized individual into a secure location; it is not a wireless network attack. ---

1. National Institute of Standards and Technology (NIST) Special Publication 800-153

Guidelines for Securing Wireless Local Area Networks (WLANs).

Section 3.3.1

Rogue Access Points: "A rogue AP is an AP that is connected to an organization’s network without the organization’s knowledge or permission... Rogue APs pose a major threat to organizations because they are not managed by the organization’s network administrators and usually do not have the same security configurations as legitimate APs." This directly defines the situation described.

Section 3.3.2

Evil Twin Access Points: "An evil twin AP is a rogue AP that is configured to be a copy of a legitimate AP... An evil twin AP has the same Service Set Identifier (SSID) as a legitimate AP." This reference clarifies why option C is incorrect

as the SSIDs in the scenario are different.

2. Purdue University

Information Technology Department

Rogue Wireless Access Points.

"What is a Rogue Wireless Access Point?" section: "A rogue wireless access point is a wireless access point that has been installed on a secure network without the explicit authorization of the network administrator. It can be set up by a well-meaning employee or by a malicious attacker." This university documentation supports the definition of a rogue AP as any unauthorized AP on the premises.

3. Kim

D.

& Solomon

M. G. (2021). Mike Meyers’ CompTIA Network+ Certification Passport

Seventh Edition (Exam N10-008). McGraw-Hill. (Note: While a commercial book

its content is based on official exam objectives and provides academically sound definitions aligned with the N10-009 domain).

Chapter 12

"Network Security": The text distinguishes between a rogue AP as any unauthorized WAP and an evil twin as a specific type of rogue AP that "looks for all the world like a legitimate WAP" by using the same SSID and security settings. This aligns with the distinction made in the explanation.