How can we protect against the evil twin

Question

An Evil Twin attack involves an attacker setting up a fake Wi-Fi access point to steal credentials from IoT devices and users.

• How do IoT devices detect and avoid connecting to an Evil Twin?
• Can certificate-based authentication prevent this type of attack?
• Are there tools to automatically recognize and warn users about suspicious access points?

Looking for effective ways to mitigate Evil Twin attacks, especially for IoT security.