Wireless Piggybacking vs Evil Twin Attack
Jane invites her friends Alice and John over for a LAN party. Alice and John access Jane’s wireless network without a password. However, Jane has a long, complex password on her router. What attack has likely occurred?
Community Votes
56% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The scenario tests the distinction between piggybacking (connecting to an existing network) and evil twin (creating a rogue AP), with the trap being the assumption that any unauthorized connection implies a rogue AP.
This question explores unauthorized access to a secure wireless network where the legitimate password is known but not used. It establishes that piggybacking is the correct term when users connect to an open or accessible network, distinguishing it from evil twin attacks.
Many learners select Evil Twin because they assume attackers always set up fake access points, ignoring that piggybacking involves using the legitimate network's infrastructure without credentials.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Piggybacking refers to the act of accessing a wireless network without permission, often by connecting to an open SSID or using a network that has been inadvertently left accessible. In this scenario, Alice and John are connecting to Jane’s actual network infrastructure. The key detail is that Jane has a long, complex password, yet the friends access it without one. This strongly implies the network was configured as open or they exploited a vulnerability that rendered the password irrelevant for their specific connection instance, fitting the definition of piggybacking on the legitimate network.Why the Other Options Are Wrong
Wardriving involves physically moving around to discover wireless networks, which is not described here. Wireless sniffing is about intercepting data packets, not gaining initial access. An Evil Twin attack requires the attacker to set up a rogue Access Point mimicking the legitimate SSID. While some comments suggest an Evil Twin, the prompt states they accessed 'Jane’s wireless network,' implying the genuine infrastructure was used, not a clone.Community Comment Notes
Community debate is split, with many voting for Evil Twin. As bibibi noted, some interpret the lack of password as evidence of a 'rogue ssid'. However, Dogeo also argues for Evil Twin based on the idea that a fake AP allowed connection without the real password. Conversely, HazalAlenazi correctly identifies Piggybacking, explaining it as gaining access without the owner's permission. The confusion stems from whether 'accessed Jane’s wireless network' means the physical router or just the SSID name.Exam Strategy
Always distinguish between the target of the attack (the legitimate AP vs. a rogue AP). If the question says they connected to the 'legitimate' network or the 'actual' network, look for Piggybacking. If it mentions a 'mimic' or 'clone', look for Evil Twin.
Frequently Asked Questions
Why isn't this an Evil Twin attack?
An Evil Twin requires a rogue AP mimicking the SSID. The prompt specifies they accessed Jane's actual network, implying the genuine hardware was used.
How can they connect without a password if one exists?
This suggests the network was temporarily opened, or they exploited a vulnerability that bypassed authentication, which falls under piggybacking usage.