A rogue access point is defined as one that is not authorized for operation.

• A. It is configured without authorization
• B. It uses encrypted protocols only
• C. It is managed by the IT department
• D. It broadcasts on all channels

Answer: (A)

A rogue access point is defined by being connected to the network without proper authorization. It’s typically installed by a user or attacker outside the standard approval process, effectively bypassing security controls and policies. Encryption, management by the IT department, or the number of channels used do not determine whether an AP is rogue—legitimate networks can use strong encryption and be IT-managed, and channel usage is a normal configuration detail. The key point is that it operates without authorization, which is what makes it risky and unauthorized.