A penetration tester is assessing an HF RFID system that uses ISO 14443 tags. The tester wants to capture the communication between a tag and a reader to analyze the authentication protocol. What is the most effective way to capture this traffic?

Use a high-gain antenna and a spectrum analyzer to record the modulation.

Connect a logic analyzer to the tag's antenna pins.

Use a software-defined radio tuned to 2.4 GHz to capture the signals.

Place a Proxmark3 in field-listener mode near the reader to record the RF signals.

A hospital uses HF RFID wristbands to track patients. An attacker wants to prevent the system from reading a specific wristband during an emergency. Which technique would be most effective and least likely to be noticed?

Place a thin metal foil over the wristband to shield it from the reader's RF field.

Send a kill command to the wristband using a Proxmark3.

Use a high-power transmitter to jam the entire 13.56 MHz band.

Use a magnet to demagnetize the wristband's antenna.

A company uses HF RFID cards for physical access control. The system uses ISO 14443A and a proprietary authentication protocol. A security consultant demonstrates a relay attack using two Proxmark3 devices. The company wants to mitigate this attack but cannot change the cards or the reader hardware. Which of the following is the most practical mitigation?

Add a Faraday cage around the reader to block external RF signals

Use a longer authentication key to make the relay attack computationally infeasible

Implement a policy requiring users to present their card and then enter a PIN on a keypad

Reduce the reader's transmit power to limit the read range to 1 cm

A company is deploying an HF RFID system for physical access control. They need to prevent relay attacks while keeping the system usable for employees who must present their badges quickly. Which countermeasure is most effective?

Use a distance-bounding protocol that measures the round-trip time of challenge-response messages.

Use a Faraday cage around the reader to prevent external RF signals.

Encrypt all communication between the tag and reader using AES-128.

Require users to enter a PIN on the reader after presenting the badge.

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 2

High-Frequency RFID Attacks GAWN Practice Questions (Page 7)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

8concepts

Questions 31–35

31application · medium
A penetration tester is assessing an HF RFID system that uses ISO 14443 tags. The tester wants to capture the communication between a tag and a reader to analyze the authentication protocol. What is the most effective way to capture this traffic?
Select an answer first
32application · medium
A hospital uses HF RFID wristbands to track patients. An attacker wants to prevent the system from reading a specific wristband during an emergency. Which technique would be most effective and least likely to be noticed?
Select an answer first
33expert · hard
A company uses HF RFID cards for physical access control. The system uses ISO 14443A and a proprietary authentication protocol. A security consultant demonstrates a relay attack using two Proxmark3 devices. The company wants to mitigate this attack but cannot change the cards or the reader hardware. Which of the following is the most practical mitigation?
Select an answer first
34foundation · easy
Which physical countermeasure can be used to prevent unauthorized reading of an HF RFID card?
Select an answer first
35expert · medium
A company is deploying an HF RFID system for physical access control. They need to prevent relay attacks while keeping the system usable for employees who must present their badges quickly. Which countermeasure is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

High-Frequency RFID Attacks GAWN Practice Questions (Page 7)

Questions 31–35

A penetration tester is assessing an HF RFID system that uses ISO 14443 tags. The tester wants to capture the communication between a tag and a reader to analyze the authentication protocol. What is the most effective way to capture this traffic?

A hospital uses HF RFID wristbands to track patients. An attacker wants to prevent the system from reading a specific wristband during an emergency. Which technique would be most effective and least likely to be noticed?

Which physical countermeasure can be used to prevent unauthorized reading of an HF RFID card?

A company is deploying an HF RFID system for physical access control. They need to prevent relay attacks while keeping the system usable for employees who must present their badges quickly. Which countermeasure is most effective?

Keep studying — RFID and NFC Attacks