A warehouse uses HF RFID readers at dock doors to track pallets. An attacker wants to disrupt the reading of a specific pallet without affecting other operations. Which method is most targeted?

Send a kill command to the tag using a Proxmark3.

Place a metal shield over the tag on the pallet.

Use a high-power transmitter to overload the reader's receiver.

Use a wideband jammer to flood the 13.56 MHz band.

A security auditor is reviewing an HF RFID system that uses a reader connected to a backend database over a network. The auditor wants to identify the most vulnerable interface. Which interface is typically the most susceptible to remote attack?

The network connection between the reader and the backend database.

The RF interface between the tag and the reader.

The physical casing of the reader.

The power supply of the reader.

A security team is analyzing an HF RFID system that uses a proprietary protocol. They have captured a large number of authentication sessions and noticed that the reader always sends the same challenge. Which attack is most likely to succeed?

Use a jamming device to disrupt the reader and then present a cloned tag.

Use a relay attack to forward the challenge to a legitimate tag.

Replay the captured authentication response from a legitimate tag to authenticate as that tag.

Perform a brute-force attack on the tag's UID.

A company uses ISO 15693 tags for inventory tracking. An auditor discovers that the tags' memory can be read without any authentication and that the data is not encrypted. The auditor wants to demonstrate that an attacker could create a counterfeit tag that appears identical to a legitimate one. What is the most direct way to do this?

Use a Proxmark3 to read the tag's memory, then write the captured data to a blank ISO 15693 tag.

Use a reader to send a kill command to the tag, then reprogram it with new data.

Use a magnet to physically alter the tag's internal antenna and change its resonant frequency.

Use a software-defined radio to replay the tag's RF carrier frequency at a higher power.

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 2

High-Frequency RFID Attacks GAWN Practice Questions (Page 6)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

8concepts

Questions 26–30

26application · medium
A warehouse uses HF RFID readers at dock doors to track pallets. An attacker wants to disrupt the reading of a specific pallet without affecting other operations. Which method is most targeted?
Select an answer first
27application · medium
A security auditor is reviewing an HF RFID system that uses a reader connected to a backend database over a network. The auditor wants to identify the most vulnerable interface. Which interface is typically the most susceptible to remote attack?
Select an answer first
28foundation · easy
Which method is used to perform a denial-of-service attack against HF RFID by overwhelming the reader with noise?
Select an answer first
29expert · medium
A security team is analyzing an HF RFID system that uses a proprietary protocol. They have captured a large number of authentication sessions and noticed that the reader always sends the same challenge. Which attack is most likely to succeed?
Select an answer first
30application · medium
A company uses ISO 15693 tags for inventory tracking. An auditor discovers that the tags' memory can be read without any authentication and that the data is not encrypted. The auditor wants to demonstrate that an attacker could create a counterfeit tag that appears identical to a legitimate one. What is the most direct way to do this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

High-Frequency RFID Attacks GAWN Practice Questions (Page 6)

Questions 26–30

A warehouse uses HF RFID readers at dock doors to track pallets. An attacker wants to disrupt the reading of a specific pallet without affecting other operations. Which method is most targeted?

A security auditor is reviewing an HF RFID system that uses a reader connected to a backend database over a network. The auditor wants to identify the most vulnerable interface. Which interface is typically the most susceptible to remote attack?

Which method is used to perform a denial-of-service attack against HF RFID by overwhelming the reader with noise?

A security team is analyzing an HF RFID system that uses a proprietary protocol. They have captured a large number of authentication sessions and noticed that the reader always sends the same challenge. Which attack is most likely to succeed?

Keep studying — RFID and NFC Attacks