A logistics company uses HF RFID tags on shipping containers to track their location. The tags are read at multiple checkpoints. The company is concerned about two threats: an attacker eavesdropping on tag-reader communication to clone tags, and an attacker jamming the readers to prevent tracking. They have a limited budget and must choose one primary mitigation. Which approach best addresses both threats?

Increase the reader's transmit power to overcome jamming and extend the read range

Use a proprietary protocol that is not publicly documented

Use tags with encrypted communication and readers with directional antennas

Deploy a centralized monitoring system that detects anomalies in read patterns and alerts staff

A security auditor is testing an HF RFID system that uses ISO 14443A. The auditor positions a Proxmark3 near a legitimate card and successfully captures the authentication exchange between the card and a reader. The auditor then attempts to replay the captured exchange to a different reader but fails. Which of the following is the most likely reason?

The second reader uses a different frequency than the first reader

The authentication exchange includes a reader-specific challenge that is not valid for the second reader

The Proxmark3 cannot emulate the card's response at the required data rate

The second reader does not support the same anti-collision protocol

A warehouse uses HF RFID readers at dock doors to automatically log incoming pallets. During a routine audit, a security consultant demonstrates that a portable device can prevent the readers from logging any tags within a 5-meter radius. The warehouse manager wants a mitigation that does not require replacing the existing tags or readers. Which control would be most effective?

Implement a watchdog system that alerts staff when the reader's signal-to-noise ratio drops below a threshold

Deploy a second reader at each dock door to provide redundancy

Use a directional antenna on the reader and physically shield the read zone with a metal mesh

Install RF-absorbing material around the dock door readers

A retail store uses HF RFID tags on high-value items. An attacker wants to prevent the store's inventory system from detecting a specific item at the exit. Which technique is most effective and least likely to be detected?

Wrap the item's tag in aluminum foil.

Send a kill command to the tag using a handheld device.

Use a magnet to erase the tag's memory.

Use a portable jammer to block the exit reader.

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 2

High-Frequency RFID Attacks GAWN Practice Questions (Page 2)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

8concepts

Questions 6–10

6expert · hard
A logistics company uses HF RFID tags on shipping containers to track their location. The tags are read at multiple checkpoints. The company is concerned about two threats: an attacker eavesdropping on tag-reader communication to clone tags, and an attacker jamming the readers to prevent tracking. They have a limited budget and must choose one primary mitigation. Which approach best addresses both threats?
Select an answer first
7application · medium
A security auditor is testing an HF RFID system that uses ISO 14443A. The auditor positions a Proxmark3 near a legitimate card and successfully captures the authentication exchange between the card and a reader. The auditor then attempts to replay the captured exchange to a different reader but fails. Which of the following is the most likely reason?
Select an answer first
8application · medium
A warehouse uses HF RFID readers at dock doors to automatically log incoming pallets. During a routine audit, a security consultant demonstrates that a portable device can prevent the readers from logging any tags within a 5-meter radius. The warehouse manager wants a mitigation that does not require replacing the existing tags or readers. Which control would be most effective?
Select an answer first
9application · medium
A retail store uses HF RFID tags on high-value items. An attacker wants to prevent the store's inventory system from detecting a specific item at the exit. Which technique is most effective and least likely to be detected?
Select an answer first
10foundation · easy
Which application is a typical use of high-frequency (HF) RFID technology?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

High-Frequency RFID Attacks GAWN Practice Questions (Page 2)

Questions 6–10

A retail store uses HF RFID tags on high-value items. An attacker wants to prevent the store's inventory system from detecting a specific item at the exit. Which technique is most effective and least likely to be detected?

Which application is a typical use of high-frequency (HF) RFID technology?

Keep studying — RFID and NFC Attacks