A university library uses 125 kHz RFID tags in student ID cards to borrow books. A student discovers that the card's tag ID is transmitted in cleartext and decides to copy it to a blank writable LF tag. The library wants to prevent this type of cloning with minimal disruption to the existing card issuance process. Which approach is most appropriate?

Use a read-only LF tag that cannot be written after issuance

Switch to a proprietary LF tag that uses a rolling code for each read

Increase the reader's polling frequency to detect duplicate tags faster

Store the student's photo on the tag so the librarian can verify identity

A data center uses a 125 kHz proximity card for entry to the server floor. An attacker places a small battery-powered device near the employee entrance that captures the card's response and forwards it over a long-range link to a second device placed at the server-floor door. The second device replays the response to the reader. The facility manager must choose a mitigation that works immediately with existing cards and readers. Which option is most effective?

Implement a Faraday cage around the entire server-floor door

Reduce the reader's output power to the minimum that still reads a card at 2 cm

Add a second factor, such as a PIN pad, at the server-floor door

Install a directional antenna on the reader to focus the field only on the cardholder

A research laboratory uses a 125 kHz RFID system to control access to a cleanroom. The system uses a simple challenge-response protocol, but the response is a static value that is the same for every challenge. An attacker has placed a relay device near the cleanroom door that forwards the reader's challenge to a remote device, which then sends back the static response. The attacker's goal is to enter the cleanroom without a valid badge. Which mitigation would be most effective against this relay attack?

Replace the static response with a dynamic response that changes with each challenge

Add a PIN code requirement after the badge is presented

Use a longer-range reader so the badge can be read from a greater distance

Increase the reader's polling frequency to reduce the time window for the relay

A bank's vault door uses a 125 kHz proximity card for entry. An attacker uses a relay device to forward the card's response from an employee in the lobby to the vault door reader. The bank wants to mitigate this attack but cannot replace the cards or readers due to budget constraints. Which mitigation is most effective?

Implement a Faraday cage around the vault door

Reduce the reader's output power to require the card to be within 1 cm of the reader

Install a motion sensor inside the vault that requires the door to be opened within 5 seconds of card presentation

Add a biometric fingerprint reader at the vault door

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 1

Low-Frequency RFID Attacks GAWN Practice Questions (Page 2)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

Questions 6–10

6application · medium
A university library uses 125 kHz RFID tags in student ID cards to borrow books. A student discovers that the card's tag ID is transmitted in cleartext and decides to copy it to a blank writable LF tag. The library wants to prevent this type of cloning with minimal disruption to the existing card issuance process. Which approach is most appropriate?
Select an answer first
7expert · hard
A data center uses a 125 kHz proximity card for entry to the server floor. An attacker places a small battery-powered device near the employee entrance that captures the card's response and forwards it over a long-range link to a second device placed at the server-floor door. The second device replays the response to the reader. The facility manager must choose a mitigation that works immediately with existing cards and readers. Which option is most effective?
Select an answer first
8foundation · easy
In an LF RFID system, which component is responsible for modulating the RF signal to transmit data from the tag to the reader?
Select an answer first
9expert · hard
A research laboratory uses a 125 kHz RFID system to control access to a cleanroom. The system uses a simple challenge-response protocol, but the response is a static value that is the same for every challenge. An attacker has placed a relay device near the cleanroom door that forwards the reader's challenge to a remote device, which then sends back the static response. The attacker's goal is to enter the cleanroom without a valid badge. Which mitigation would be most effective against this relay attack?
Select an answer first
10expert · hard
A bank's vault door uses a 125 kHz proximity card for entry. An attacker uses a relay device to forward the card's response from an employee in the lobby to the vault door reader. The bank wants to mitigate this attack but cannot replace the cards or readers due to budget constraints. Which mitigation is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Low-Frequency RFID Attacks GAWN Practice Questions (Page 2)

Questions 6–10

In an LF RFID system, which component is responsible for modulating the RF signal to transmit data from the tag to the reader?

Keep studying — RFID and NFC Attacks