* An evil twin is a type of rogue access point that mimics a legitimate one by using the same SSID, encryption, and authentication settings.
* An attacker can set up an evil twin near a corporate network and trick users into connecting to it instead of the real one.
* Once connected, the attacker can intercept the user's network traffic, capture their credentials, and launch other attacks such as phishing, malware injection, or man-in-the-middle.
* To prevent evil twin attacks, network administrators should use strong encryption and authentication methods, such as WPA2-Enterprise with 802.1x, and monitor the wireless spectrum for any unauthorized access points. References:
* CompTIA Network+ N10-008 Exam Common Attack Types Quiz
* Rogue Access Points and Evil Twins - SY0-601 CompTIA Security+ : 1.4 - Professor Messer IT Certification Training Courses
* CompTIA Network+ (N10-008) Practice Test Questions