Which of the following attacks does the analyst MOST likely see in this packet capture?

A user reports constant lag and performance issues with the wireless network when working at a local coffee shop. A security analyst walks the user through an installation of Wireshark and get a five-minute pcap to analyze.

The analyst observes the following output:

Which of the following attacks does the analyst MOST likely see in this packet capture?
A . Session replay
B . Evil twin
C . Bluejacking
D . ARP poisoning

Answer: B

Explanation:

https://en.wikipedia.org/wiki/Wi-Fi_deauthentication_attack

One of the main purposes of deauthentication used in the hacking community is to force clients to connect to an evil twin access point which then can be used to capture network packets transferred between the client and the access point.

Latest SY0-601 Dumps Valid Version with 396 Q&As

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments