CompTIA PenTest+ (PT0-003) — Question 128

A company hires a penetration tester to test the security implementation of its wireless networks. The main goal for this assessment is to intercept and get access to sensitive data from the company's employees. Which of the following tools should the security professional use to best accomplish this task?

Answer options

Correct answer: B

Explanation

WiFi-Pumpkin is specifically designed for creating rogue access points, allowing an attacker to intercept sensitive data from unsuspecting users connecting to the fake network. Metasploit is more suited for exploiting known vulnerabilities rather than targeting wireless networks directly, while SET is focused on social engineering attacks. TheHarvester and WiGLE.net are not tools meant for intercepting wireless communications or data.