Define a rogue AP and one common mitigation technique.

• A. An unauthorized AP connected to the network; mitigated by WIDS/WIPS and regular site surveys.
• B. A legitimate AP with a misconfigured SSID.
• C. A router acting as a gateway for external access.
• D. A device that blocks wireless access.

Answer: (A)

A rogue access point is an unauthorized wireless AP connected to the network, often deployed without approval. It can bypass security controls, extend the network’s reach, or intercept traffic, creating a backdoor for attackers or a vector for data leakage. The best way to mitigate this is to use wireless intrusion detection and prevention systems (WIDS/WIPS) to monitor for unauthorized APs and policy violations, coupled with regular site surveys to identify unfamiliar devices and verify that only authorized APs are active. Site surveys help maintain an accurate inventory of approved hardware and configurations, making it easier to spot rogue devices. Other descriptions describe legitimate or unrelated devices and do not capture the risk posed by an unauthorized AP.