Which of the following attacks does the analyst MOST likely see in this packet capture?

A user reports constant lag and performance issues with the wireless network when working at a local coffee shop. A security analyst walks the user through an installation of Wireshark and get a five-minute pcap to analyze.

The analyst observes the following output:

Which of the following attacks does the analyst MOST likely see in this packet capture?
A . Session replay
B . Evil twin
C . Bluejacking
D . ARP poisoning

View Answer

Answer: B

Explanation:

https://en.wikipedia.org/wiki/Wi-Fi_deauthentication_attack

One of the main purposes of deauthentication used in the hacking community is to force clients to connect to an evil twin access point which then can be used to capture network packets transferred between the client and the access point.