The statement 'Rogue access points are authorized access points set up by individuals or departments' is true or false?

• A. True
• B. Cannot be Determined
• C. Never
• D. False

Answer: (D)

Rogue access points are unauthorized wireless devices deployed without approval. Because they’re not sanctioned by the organization, they bypass standard security controls and management processes. This makes them a security risk: they can use weak or no encryption, misroute traffic, or be used as a foothold for attackers to eavesdrop, impersonate a legitimate network (an evil twin), or capture credentials. Legitimate access points, in contrast, are planned, configured, and managed by IT with proper security settings (such as strong encryption, centralized authentication, and monitoring). So the statement is false because the defining trait of a rogue AP is that it is unauthorized, not authorized. To prevent issues, organizations use wireless intrusion detection systems, regular wireless site surveys, and strict policies that require all APs to be registered and approved before deployment.