Question 48

An evil twin achieves login credentials.

An evil twin is a type of wireless attack where a rogue access point mimics a legitimate one to deceive users into connecting to it. This allows the attacker to capture sensitive information, particularly login credentials, from users who connect to the fake network.

A) DNS poisoning

DNS poisoning refers to the manipulation of the Domain Name System to redirect users to malicious sites. While this is a form of cyber attack, it is not specifically an objective of an evil twin attack, which primarily focuses on intercepting login credentials through a deceptive Wi-Fi connection.

B) Login credentials

This option accurately describes the primary objective of an evil twin attack. By creating a fake Wi-Fi network that appears legitimate, attackers can capture users' login credentials as they connect and attempt to access their accounts, making this the correct answer.

C) ARP spoofing

ARP spoofing involves sending false Address Resolution Protocol messages over a local area network. Although it can be used in conjunction with an evil twin attack to intercept communications, it is not the main objective of the evil twin itself, which is focused on credential theft.

D) Denial of service

A denial of service attack aims to make a network service unavailable to its intended users. This is unrelated to the goals of an evil twin attack, which is primarily concerned with capturing user credentials rather than disrupting service.

Conclusion

The correct answer, login credentials, is the primary goal of an evil twin attack, as it allows attackers to harvest sensitive information from unsuspecting users. The other options, while related to different types of cyber attacks, do not directly pertain to the objectives of an evil twin, which focuses on deception and credential theft.