What best describes a rogue access point?

• A. An authorized access point set up by IT
• B. An access point located outside the building
• C. An unauthorized access point set up by individuals or departments
• D. A secure access point for guests

Answer: (C)

A rogue access point is a wireless AP that isn’t authorized or managed by the organization’s IT team. It’s typically set up by individuals or departments to gain wireless access outside of approved controls, and it may be plugged into the network without going through the standard security checks. Because it’s unmanaged, it can use weak or no encryption and can be used to capture traffic or redirect users to a malicious site, leading to credential theft or a man-in-the-middle attack. The danger isn’t just where the device sits; it’s that users can unknowingly connect to it, assuming it’s part of the legitimate network.

In contrast, an authorized AP is part of the controlled network, configured and monitored by IT, with proper security measures. A guest AP is a legitimate, separate network with restrictions for visitors, not meant to expose internal resources. And simply being located outside the building doesn’t by itself make an AP rogue. The key idea is unauthorized deployment and lack of central management, which creates significant security risks.