Cisco Cyber Security Practice Exam

What defines an 'Evil Twin' attack?

1. A malicious Wi-Fi hotspot mimicking a legitimate one

2. A phishing attempt via email

3. A virus that replicates on a network

4. A direct attack on physical hardware

The correct answer is: A malicious Wi-Fi hotspot mimicking a legitimate one

An 'Evil Twin' attack is characterized by a malicious Wi-Fi hotspot that masquerades as a legitimate one. This type of attack trick users into connecting to the rogue access point, believing it to be a secure and trusted network. Once connected, attackers can intercept sensitive information such as passwords, usernames, and even credit card details, as all transmitted data through the fake hotspot can be monitored. This tactic exploits the convenience and frequency with which users connect to Wi-Fi networks, particularly in public spaces like coffee shops, airports, or libraries, where multiple similar network names may exist. The attack relies on users’ trust, which is why the appearance of the hotspot must closely replicate that of a legitimate one to be effective. Other types of attacks mentioned, such as phishing through email or viruses that replicate on a network, target individuals and systems through different vectors and mechanisms, not by creating a counterfeit access point. Likewise, a direct attack on physical hardware would focus more on damaging or manipulating physical devices rather than deceiving users through network impersonation.