Bluetooth Attacks GAWN Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security consultant is testing the availability of a Bluetooth-based access control system. The system uses a proprietary protocol that is not vulnerable to known DoS attacks. The consultant wants to disrupt the system without affecting other Bluetooth devices in the area. Which approach is most appropriate?

   • AUse a targeted deauthentication attack by sending spoofed LMP packets to the target.
   • BUse a tool like Carwhisperer to inject audio into the system.
   • CUse a Bluetooth jammer to flood the 2.4 GHz band.
   • DUse a tool like BlueSmack to send oversized packets to the target.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security tester is assessing a Bluetooth keyboard that uses legacy pairing. The tester has captured the pairing exchange and wants to recover the link key to decrypt keystrokes. The tester has a limited time window and needs to perform the attack efficiently. Which approach would be MOST efficient?

   • AUse a MITM attack during the pairing process to intercept the link key.
   • BUse a dictionary attack on the PIN, trying common PINs like 0000, 1234, and 9999.
   • CUse a brute-force attack on the 4-digit PIN using a GPU-accelerated tool to crack the PIN offline.
   • DUse a BlueBorne exploit to extract the link key from the keyboard's memory.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is BlueBorne?

   • AA set of vulnerabilities that allow remote code execution and man-in-the-middle attacks via Bluetooth
   • BA hardware dongle for Bluetooth sniffing
   • CA Bluetooth denial-of-service tool
   • DA tool for Bluetooth traffic analysis
   Reveal Solution Discussion Select an answer first
5. 4application · easy

   A security analyst is using Kismet to monitor Bluetooth traffic in a facility. Which type of Bluetooth traffic can Kismet capture?

   • AOnly encrypted Bluetooth traffic
   • BBoth classic Bluetooth and BLE traffic
   • CBLE traffic only
   • DClassic Bluetooth traffic only
   Reveal Solution Discussion Select an answer first
6. 5application · easy

   A security analyst is classifying Bluetooth attacks for a report. They need to categorize an attack that sends a large number of pairing requests to a device to exhaust its resources. Which category best fits this attack?

   • AEavesdropping attack
   • BMan-in-the-middle attack
   • CDenial of Service attack
   • DReconnaissance attack
   Reveal Solution Discussion Select an answer first