A company issues Bluetooth headsets to customer support staff. An attacker in the office parking lot successfully pairs with an employee's headset without the employee's knowledge and listens to a confidential call. The headset uses an older Bluetooth version with a known vulnerability in the pairing process. Which combination of factors most directly enabled this attack?

The headset was left in discoverable mode and the attacker used bluejacking

The employee used a weak PIN code that was easily guessed

The attacker used bluesnarfing to extract the encryption key

Weak encryption and insecure pairing due to the older Bluetooth version

A new network administrator is configuring a wireless access point for a branch office. The administrator notices that the AP has a default admin password and the SSID is set to the manufacturer's default name. Which set of actions should the administrator take to secure the wireless network?

Enable WEP encryption and set a strong admin password

Keep the default admin password but change the SSID to something unique

Change the default admin password, change the SSID, and enable WPA2/WPA3 encryption

Disable SSID broadcast and enable MAC address filtering

A security auditor is reviewing the mobile device policy for a sales team that frequently works in public spaces. The auditor notices that employees leave Bluetooth enabled on their laptops and phones at all times. During a demonstration, the auditor uses a tool to send unsolicited messages to a nearby employee's phone without pairing. Which Bluetooth attack vector was demonstrated, and what is the most effective policy change to prevent this specific attack?

Bluebugging; require the use of a PIN code for all pairings

Bluejacking; require all Bluetooth devices to use WPA2 encryption

Bluesnarfing; require devices to be set to non-discoverable mode

Bluejacking; require Bluetooth to be disabled when not actively used

What is a common vulnerability in Bluetooth pairing that can be exploited by an attacker within range?

The requirement for user confirmation during pairing

The use of a fixed PIN for pairing

EC-CouncilEthical Hacking Essentials

Domain 7Objective 2

Bluetooth Threats and Wireless Security Risks EHE Practice Questions (Page 8)

Part of the Wireless, Mobile, IoT, and OT Attacks domain, which makes up ~15% of our current practice bank.

42questions here

9free pages

6concepts

Questions 36–40

36application · medium
A company issues Bluetooth headsets to customer support staff. An attacker in the office parking lot successfully pairs with an employee's headset without the employee's knowledge and listens to a confidential call. The headset uses an older Bluetooth version with a known vulnerability in the pairing process. Which combination of factors most directly enabled this attack?
Select an answer first
37application · medium
A new network administrator is configuring a wireless access point for a branch office. The administrator notices that the AP has a default admin password and the SSID is set to the manufacturer's default name. Which set of actions should the administrator take to secure the wireless network?
Select an answer first
38application · medium
A security auditor is reviewing the mobile device policy for a sales team that frequently works in public spaces. The auditor notices that employees leave Bluetooth enabled on their laptops and phones at all times. During a demonstration, the auditor uses a tool to send unsolicited messages to a nearby employee's phone without pairing. Which Bluetooth attack vector was demonstrated, and what is the most effective policy change to prevent this specific attack?
Select an answer first
39foundation · easy
What is a common vulnerability in Bluetooth pairing that can be exploited by an attacker within range?
Select an answer first
40foundation · easy
Which wireless encryption protocol is considered the weakest and can be easily cracked?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Bluetooth Threats and Wireless Security Risks EHE Practice Questions (Page 8)

Questions 36–40

A new network administrator is configuring a wireless access point for a branch office. The administrator notices that the AP has a default admin password and the SSID is set to the manufacturer's default name. Which set of actions should the administrator take to secure the wireless network?

What is a common vulnerability in Bluetooth pairing that can be exploited by an attacker within range?

Which wireless encryption protocol is considered the weakest and can be easily cracked?

Keep studying — Wireless, Mobile, IoT, and OT Attacks