A rogue/unauthorized access point is one that is not authorized for operation by a particular firm or network.

• A. True
• B. False
• C. Sometimes
• D. Not applicable

Answer: (A)

A rogue wireless access point is defined by one key fact: it operates without authorization from the organization. It might be set up by an insider or an attacker, and its presence on the network is not approved by IT or security policy. Because the defining characteristic is the lack of authorization, the statement is true. Even if the device uses the same network name (SSID) or looks like a legitimate access point, if the firm did not authorize it, it’s considered rogue and can introduce risks such as traffic interception, bypassing controls, or enabling man-in-the-middle attacks. To protect against rogue APs, organizations deploy wireless monitoring (WIDS/WIPS), enforce strict device authorization, and continuously audit AP inventories.