A municipal IT lead proposes a rogue AP during an authorized wireless assessment to see whether staff join lookalike SSIDs. What goal best defines that evil-twin class of testing?
Select an answer to reveal the explanation.
Short Explanation
An evil twin is the Wi-Fi version of a lookalike storefront with the same neon sign. In an authorized test, you stand up a rogue that copies a trusted SSID so you can see who walks in—and whether traffic or logins can be scooped up. Mounting torque, flipping the city to WEP, or banning monitor mode miss the whole point.
Full Explanation
Evil-twin / rogue-AP testing impersonates a legitimate SSID to attract client associations and observe interception or credential-harvest exposure within authorized scope. The technique class is about client attraction and trust abuse, not physical install QA, downgrading production crypto for speed, or forbidding monitor-mode assessment tooling. OSWP-style practice emphasizes recognizing that purpose and keeping the work inside RoE.