A person drives through a neighborhood with a laptop running wireless network scanning software, recording the SSIDs, encryption types, and GPS locations of every Wi-Fi network detected. They do not connect to any network. Which attack type does this describe, and what is the PRIMARY risk it creates for the detected networks?

An adversary sets up a rogue WAP in a coffee shop with the SSID “CafeExpress_Free” (the real network is “CafeExpress-Guest”). The adversary intercepts the credentials of three customers who connect to the rogue network. Which of the following MOST accurately classifies this adversary’s skill level and explains why?

A hospital’s emergency room wireless network is completely disabled for 2 hours during a shift change. All wireless communication devices, pagers, and monitoring systems in the ER stop functioning simultaneously. Security finds no evidence of unauthorized access to patient records or any data exfiltration. Which attack type BEST explains these observations, and what was the PRIMARY impact?

An employee at a hotel conference connects their laptop to “ConferenceCenter_WiFi” without verifying the SSID with hotel staff. They access their company email and internal dashboard. An adversary running an evil twin intercepts their session token. The employee has a VPN client installed but did not enable it before connecting. Which of the following BEST explains what the VPN would have prevented?

Which of the following correctly describes what is TRUE about all three wireless attack types covered in Topic 1.3?

I. Evil twin, jamming, and war driving attacks can all be executed using pre-built tools available online, making all three accessible to low-skilled adversaries.
II. All three attack types result in credential theft, since wireless network access inherently enables interception of user credentials.
III. VPN prevents the data theft impact of all three attack types.