39. While reviewing access logs, a technician notices repeated connection attempts from unfamiliar wireless devices parked outside the building during non-business hours. The signal strength suggests the devices are nearby but not on the premises. Which type of security threat does this scenario most likely represent?
Answer: C
C) War driving
This scenario most likely represents a war driving security threat, where an individual drives or walks around an area to locate unsecured wireless networks. The repeated connection attempts from unfamiliar devices indicate that the targets are scanning for vulnerabilities in nearby networks.
A) Eavesdropping
Eavesdropping involves intercepting communications, typically in a passive manner, to gather sensitive information. In this scenario, the technician observes active connection attempts, which suggests a more aggressive approach rather than passive listening, making this option incorrect.
B) Deauthentication attack
A deauthentication attack is a method used to disconnect users from a Wi-Fi network, allowing an attacker to facilitate further exploitation. While this involves interference with connections, the scenario describes connection attempts rather than disconnections, rendering this option inappropriate.
C) War driving
War driving specifically refers to the practice of searching for Wi-Fi networks while moving, often utilizing specialized tools to locate and exploit unsecured networks. The context of unfamiliar devices attempting connections from outside the building aligns with the characteristics of war driving, confirming this as the correct answer.
D) Evil twin
An evil twin attack involves setting up a rogue Wi-Fi access point that appears legitimate and tricks users into connecting. Although it involves deception, the scenario describes external connection attempts rather than users being misled into connecting to a malicious network, making this option incorrect.
Conclusion
War driving is the most fitting description of the activities observed, as it focuses on identifying and exploiting wireless networks from a mobile position. Other options such as eavesdropping, deauthentication attacks, and evil twins do not align with the observed behavior of repeated connection attempts from unfamiliar devices. Thus, war driving stands out as the definitive security threat represented in this context.