Ethical Hacking Essentials Practice Test

What type of attack involves changing the SSID of a rogue access point to lure users into connecting?

1. Jamming signal attack

2. WEP attack

3. Client mis-association attack

4. Unauthorized association

The correct answer is: Client mis-association attack

The attack that involves changing the SSID of a rogue access point to lure users into connecting is known as a client mis-association attack. This tactic exploits the tendency of users to connect to networks with familiar or enticing names, potentially leading them to unknowingly connect to a malicious access point. Once connected, attackers can capture sensitive information, perform man-in-the-middle attacks, or otherwise compromise the connected devices. In essence, the rogue access point mimics legitimate networks, deceiving users based on a recognizable SSID. This type of attack capitalizes on social engineering as well as technical vulnerabilities within Wi-Fi protocols, making it particularly effective in public or semi-public spaces where users are often looking for wireless connectivity. In contrast, other types of attacks listed do not specifically involve SSID manipulation for user connection. For instance, jamming signal attacks disrupt communications without deceiving users, while WEP attacks exploit weaknesses in the WEP encryption protocol rather than relying on user choice. Unauthorized association typically refers to devices connecting without proper authentication but doesn’t specifically address the manipulation of SSID to mislead users into connecting.