What term describes an attacker setting up a rogue access point that pretends to be a legitimate one?

• A. Man-in-the-middle
• B. Evil twin access point
• C. DoS attack
• D. Sniffing

Answer: (B)

This is describing an evil twin access point. The attacker sets up a wireless AP that closely imitates a legitimate one—often using the same SSID and sometimes matching security settings—so nearby users unknowingly connect to it instead of the real network. Once connected, the attacker can control the traffic, intercept data, or even capture credentials, effectively placing themselves in the middle of the communication. That combination of impersonating a trusted network and collecting or forwarding traffic is what defines the evil twin scenario.

A broader term, man-in-the-middle, relates to intercepting and possibly altering communications between two parties, but the specific action here—creating a rogue AP that mimics a legitimate one—is the evil twin. Denial of service focuses on disrupting availability, not impersonating a network. Sniffing refers to passively capturing packets, which can happen with various setups but doesn’t inherently describe the rogue AP masquerade.