What is the goal of a BLE key management attack?

To recover or manipulate the encryption keys used in BLE sessions

To flood the channel with packets

A BLE device supports both Just Works and Passkey Entry pairing. A security tester wants to demonstrate the risk of a MITM attack during pairing. Which pairing method is more vulnerable and why?

Just Works, because it does not authenticate either device, allowing an attacker to establish independent keys with both

Passkey Entry, because the 6-digit passkey can be brute-forced in real time during pairing

Both are equally vulnerable because neither provides authentication

Passkey Entry is more vulnerable because the passkey is transmitted in plaintext

What is the goal of a BLE denial-of-service attack that exploits connection parameters?

To force the device to disconnect or become unresponsive

A BLE proximity-based access system uses the MAC address of a user's smartphone to grant entry. An attacker wants to gain entry by impersonating the smartphone. Which attack is the attacker performing?

Spoofing the smartphone's MAC address to impersonate it to the access reader

Fuzzing the reader's firmware to bypass authentication

Jamming the communication between the smartphone and the reader to cause a denial of service

Replaying a previously captured unlock command

GIAC Assessing and Auditing Wireless Networks

Domain 4Objective 2

Bluetooth Low Energy Attacks GAWN Practice Questions (Page 2)

Part of the Bluetooth and BLE Security domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–11 in this domain), expect 4–6 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

10concepts

Questions 6–10

6foundation · easy
What is the goal of a BLE key management attack?
Select an answer first
7expert · hard
A BLE device supports both Just Works and Passkey Entry pairing. A security tester wants to demonstrate the risk of a MITM attack during pairing. Which pairing method is more vulnerable and why?
Select an answer first
8foundation · easy
Which type of BLE packet is commonly used as input for fuzzing attacks?
Select an answer first
9foundation · easy
What is the goal of a BLE denial-of-service attack that exploits connection parameters?
Select an answer first
10application · medium
A BLE proximity-based access system uses the MAC address of a user's smartphone to grant entry. An attacker wants to gain entry by impersonating the smartphone. Which attack is the attacker performing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.