CompTIA Network+ Practice Test

What is an evil twin attack in wireless networks?

1. A configuration of an access point that mimics an existing network

2. A type of encryption for secure data transmission

3. A method of physical security to prevent unauthorized access

4. A network protocol for managing devices

The correct answer is: A configuration of an access point that mimics an existing network

An evil twin attack refers to a malicious setup where an unauthorized wireless access point is created to closely resemble a legitimate one. In this scenario, attackers configure their access point to have the same SSID (Service Set Identifier) as a trusted network, such as a well-known coffee shop's Wi-Fi. Because users often connect automatically to familiar networks, they may inadvertently connect to the evil twin instead of the legitimate network. This allows the attacker to capture sensitive information such as passwords, personal data, or sensitive communication that is passed over the network. The method exploits the trust users have in familiar network names, demonstrating the importance of being vigilant about wireless connections, especially in public or unsecured environments. The other options do not accurately describe an evil twin attack. Encryption relates to securing data during transmission, physical security is about preventing unauthorized access to facilities, and network protocols are rules governing device communication rather than attack strategies.