312-50v12 Exam - Question 144

Question

You are a cybersecurity consultant for a major airport that offers free Wi-Fi to travelers. The management is concerned about the possibility of "Evil Twin" attacks, where a malicious actor sets up a rogue access point that mimics the legitimate one. They are looking for a solution that would not significantly impact the user experience or require travelers to install additional software. What is the most effective security measure you could recommend that fits these constraints, considering the airport's unique operational environment?

Examice · Accepted Answer

To address the concern of Evil Twin attacks effectively without demanding users to install additional software or significantly affecting their experience, providing education and awareness is crucial. Displaying a captive portal page that warns users about the possibility of Evil Twin attacks can remind them to verify the connection. This approach helps users to be vigilant and cautious about connecting to the legitimate Wi-Fi network, which aligns with the airport's operational environment and user convenience.

JustAName · Answer

I'd go with D, while implementing WPA3 encryption is always good to strengthen the security of the wifi. But it only protect the actual airport's wifi and doesn't properly address the issue of possible evil twin attack. So D is the best answer available in my opinion.

qwerty100 · Answer

C. Implement WPA3 encryption for the airport's Wi-Fi network

An evil twin can  Display a captive portal page that warns users about the possibility of Evil Twin attacks

anarchyeagle · Answer

Chat GPT Response: The most effective and practical solution that fits the given constraints is Option C: Implement WPA3 encryption for the airport's Wi-Fi network. This approach enhances security without significantly impacting the user experience or requiring the installation of additional software. It directly addresses the vulnerability to "Evil Twin" attacks by ensuring that the connection between the user's device and the Wi-Fi network is securely encrypted, making it much more difficult for attackers to mimic or intercept communications.

[Removed] · Answer

Hey team can we double-check this response

[Removed] · Answer

Hey team can we double-check this response

Spam_Protection · Answer

WPA3 will keep people from being disconnected and possibly connected to Evil Twin. WPA3 focus on encryption not authentication(no open network provides auth). You still need to deploy rogue-AP detection or wireless intrusion prevention/detection systems to prevent wireless attacks.

qtygbapjpesdayazko · Answer

Is D, WPA3 with a open SSID do not protect to "Evil Twin" attacks,
https://security.stackexchange.com/questions/188707/does-wpa3-owe-mean-the-return-of-evil-twins

yicx1 · Answer

C doesn't do anything to the evil twin use case

312-50v12 Exam - Question 144

Discussion