City IT wants to mitigate evil-twin MITM against the staff enterprise SSID used in civic offices. Which combination best aligns with recommended mitigations?
Select an answer to reveal the explanation.
Short Explanation
Fight the doppelgänger three ways: WIPS to smack rogue radios, training so people pause on weird portals, and 802.1X that actually checks the server cert. Hiding the SSID or sharing passwords on posters helps the attacker more than you.
Full Explanation
Evil-twin MITM mitigation combines technical and human controls: WIPS detection/containment of unauthorized APs, awareness training against fake portals, and Enterprise 802.1X deployments where clients validate EAP server certificates so they refuse impostors. Weak client validation or reliance on SSID cloaking alone leaves municipal users exposed to credential harvest.