An evil twin attack occurs when an attacker creates a fraudulent AP with an SSID very similar (or identical) to the legitimate one. Users may accidentally connect, allowing the attacker to capture traffic and credentials.
A). On-path is the consequence of connecting to the evil twin, not the initial attack itself.
B). Rogue AP is any unauthorized access point, but the key here is the malicious mimicry of a legitimate SSID
- specifically an evil twin.
D). Tailgating is a physical social engineering attack, unrelated to Wi-Fi.
References (CompTIA Network+ N10-009):
Domain: Network Security - Wireless threats (rogue APs, evil twins).