IoT Penetration Testing CPENT Practice Questions (Page 10)

Questions 46–49

1. 46foundation · easy

   What is the primary goal of an RF replay attack?

   • ATo spoof a new device identity
   • BTo capture a valid signal and retransmit it to trigger an action
   • CTo decrypt encrypted RF communications
   • DTo jam the RF signal and cause a denial of service
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A tester is assessing a BLE-enabled medical device. The device uses BLE with 'Just Works' pairing. The tester wants to intercept and modify data transmitted between the device and the companion app. Which attack is most appropriate?

   • AUse a 433 MHz RF transceiver to intercept the signal
   • BPerform a UART attack on the device
   • CPerform a man-in-the-middle attack during the pairing process
   • DReplay captured BLE packets
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Why is testing the companion mobile app important in IoT penetration testing?

   • AIt provides direct physical access to the device
   • BIt is required to perform RF signal analysis
   • CIt is the only way to access the device's firmware
   • DIt may expose APIs and credentials that can be used to compromise the device
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   Which of the following is a recommended mitigation for insecure IoT firmware updates?

   • AUse a proprietary update protocol
   • BDisable all firmware updates
   • CAllow updates only over Wi-Fi
   • DSign firmware images with a cryptographic key
   Reveal Solution Discussion Select an answer first