High-Frequency RFID Attacks GAWN Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A museum uses HF RFID tags to track artifacts. The tags are placed on display cases, and readers at the exits detect unauthorized removal. A visitor discovers that they can use a smartphone to read the tag's data. The museum wants to prevent visitors from reading the tag data while still allowing the exit readers to function. Which control would be most effective?

   • AUse tags with a password-protected read operation
   • BIncrease the reader's transmit power at the exits to overcome the visitor's smartphone
   • CUse tags that only respond to readers with a specific authentication key
   • DShield the tags with a metallic mesh embedded in the display case
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A hospital uses ISO 14443A-based access badges for staff entering medication storage rooms. A security auditor is concerned about an attacker using a low-cost NFC-enabled smartphone to capture badge data from a distance of 10–15 cm as staff walk through a corridor. Which control would most directly mitigate this specific threat without requiring badge replacement?

   • AInstall a Faraday-cage enclosure around the corridor access point
   • BDeploy a jamming transmitter that broadcasts noise at 13.56 MHz near the corridor
   • CIncrease the reader's transmit power to extend the read range beyond the corridor
   • DRequire staff to carry badges in shielded sleeves and remove them only at the reader
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A warehouse uses HF RFID readers to track inventory. An attacker uses a device to continuously transmit a signal at 13.56 MHz, preventing the readers from communicating with the tags. The warehouse manager wants to detect this attack quickly. Which of the following is the most effective detection method?

   • AMonitor the tags' battery levels to detect unusual power consumption
   • BMonitor the readers' network traffic to detect unusual patterns
   • CMonitor the readers' signal-to-noise ratio and alert when it drops below a threshold
   • DMonitor the physical security cameras to detect the attacker's device
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A hospital uses HF RFID wristbands for patient identification. The wristband contains a tag that is read by staff using handheld readers. A security review identifies that the tag's memory is readable without authentication. Which of the following is the most significant risk introduced by this vulnerability?

   • AAn attacker can modify the patient's medication dosage stored on the tag
   • BAn attacker can jam the reader to prevent patient identification
   • CAn attacker can clone the wristband and impersonate a patient
   • DAn attacker can physically damage the wristband to prevent reading
   Reveal Solution Discussion Select an answer first
6. 5expert · medium

   A security team is evaluating an ISO 14443A access control system that uses the Crypto1 cipher. They have captured a large number of authentication traces. Which attack strategy is most likely to succeed in extracting the secret key?

   • APerform a card-only attack that uses the captured nonces to recover the keystream and then derive the key.
   • BUse a dictionary attack with common default keys, such as all zeros or manufacturer defaults.
   • CUse a side-channel attack on the reader's power consumption during authentication.
   • DBrute-force the 48-bit key space by trying all possible keys against the captured traces.
   Reveal Solution Discussion Select an answer first