A security auditor is evaluating a 125 kHz RFID system used for access control in a data center. The auditor wants to identify the most vulnerable communication channel that an attacker could exploit to capture badge data. Which channel should the auditor focus on?

The wired connection between the reader and the access control panel

The wireless communication between the badge and the reader

The backend database that stores the badge IDs

A security consultant is assessing a facility that uses a 125 kHz RFID system for vehicle access to a parking garage. The system uses a long-range reader that can read the windshield-mounted tag from up to 2 meters away. The consultant wants to demonstrate the risk of cloning the tag. Which component of the LF RFID system is the most likely target for capturing the data needed to clone the tag?

The reader's antenna, which transmits the interrogation signal

The communication channel between the reader and the backend database

The tag's response signal, which contains the unique identifier

The reader's power supply, which provides energy to the tag

What is the purpose of tag emulation in an attack?

To increase the read range of the reader

To encrypt the communication between reader and tag

To physically destroy the original tag

To simulate a legitimate tag using a programmable device

In a relay attack against an LF RFID system, what does the attacker do?

Places a device between the reader and tag to forward the communication in real time

Copies the tag's memory to create a duplicate

Jams the RF signal to prevent communication

Replays a previously recorded signal at a later time

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 1

Low-Frequency RFID Attacks GAWN Practice Questions (Page 1)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

Questions 1–5

1application · medium
A security auditor is evaluating a 125 kHz RFID system used for access control in a data center. The auditor wants to identify the most vulnerable communication channel that an attacker could exploit to capture badge data. Which channel should the auditor focus on?
Select an answer first
2foundation · easy
Which frequency range is characteristic of low-frequency (LF) RFID systems?
Select an answer first
3application · medium
A security consultant is assessing a facility that uses a 125 kHz RFID system for vehicle access to a parking garage. The system uses a long-range reader that can read the windshield-mounted tag from up to 2 meters away. The consultant wants to demonstrate the risk of cloning the tag. Which component of the LF RFID system is the most likely target for capturing the data needed to clone the tag?
Select an answer first
4foundation · easy
What is the purpose of tag emulation in an attack?
Select an answer first
5foundation · easy
In a relay attack against an LF RFID system, what does the attacker do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Low-Frequency RFID Attacks GAWN Practice Questions (Page 1)

Questions 1–5

A security auditor is evaluating a 125 kHz RFID system used for access control in a data center. The auditor wants to identify the most vulnerable communication channel that an attacker could exploit to capture badge data. Which channel should the auditor focus on?

Which frequency range is characteristic of low-frequency (LF) RFID systems?

What is the purpose of tag emulation in an attack?

In a relay attack against an LF RFID system, what does the attacker do?

Keep studying — RFID and NFC Attacks