A hospital uses 125 kHz RFID wristbands for patient identification and medication administration. The wristbands contain only a unique ID that is linked to the patient's electronic health record. The hospital is concerned about both skimming and eavesdropping attacks. The wristbands are disposable and cannot be updated. Which combination of controls would provide the most comprehensive defense while maintaining clinical workflow efficiency?

Use shielded wristband holders and require staff to scan the wristband within 5 cm of the reader

Switch to a 13.56 MHz system that supports encryption between the reader and the wristband

Implement a policy that requires staff to cover the wristband with their hand when not scanning

Increase the reader's power to ensure a strong signal and reduce the chance of eavesdropping

Which best practice helps defend LF RFID systems against cloning attacks?

Storing the tag's data in plaintext

Using tags with unique, unchangeable identifiers

Using the same UID for all tags

What is the primary goal of an eavesdropping attack on an LF RFID system?

To capture the data exchanged between reader and tag

To modify the data stored on the tag

To impersonate the reader to the tag

A veterinary clinic uses 134.2 kHz RFID implants to identify pets. A client is concerned that someone could clone the implant and use it to impersonate their pet. The clinic's system only reads the unique ID number from the implant and does not use any authentication. Which action would most directly address the client's concern?

Switch to a higher-frequency RFID system that is inherently more difficult to clone

Use a shielded enclosure around the implant reader to prevent unauthorized reads

Store the implant's ID in a database and verify it against the pet's medical records

Implement a cryptographic authentication protocol between the reader and the implant

Which of the following is a typical application of low-frequency (LF) RFID?

Inventory tracking in retail supply chains

Animal identification and tracking

Electronic toll collection on highways

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 1

Low-Frequency RFID Attacks GAWN Practice Questions (Page 4)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

Questions 16–20

16expert · hard
A hospital uses 125 kHz RFID wristbands for patient identification and medication administration. The wristbands contain only a unique ID that is linked to the patient's electronic health record. The hospital is concerned about both skimming and eavesdropping attacks. The wristbands are disposable and cannot be updated. Which combination of controls would provide the most comprehensive defense while maintaining clinical workflow efficiency?
Select an answer first
17foundation · easy
Which best practice helps defend LF RFID systems against cloning attacks?
Select an answer first
18foundation · easy
What is the primary goal of an eavesdropping attack on an LF RFID system?
Select an answer first
19application · medium
A veterinary clinic uses 134.2 kHz RFID implants to identify pets. A client is concerned that someone could clone the implant and use it to impersonate their pet. The clinic's system only reads the unique ID number from the implant and does not use any authentication. Which action would most directly address the client's concern?
Select an answer first
20foundation · easy
Which of the following is a typical application of low-frequency (LF) RFID?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Low-Frequency RFID Attacks GAWN Practice Questions (Page 4)

Questions 16–20

Which best practice helps defend LF RFID systems against cloning attacks?

What is the primary goal of an eavesdropping attack on an LF RFID system?

Which of the following is a typical application of low-frequency (LF) RFID?

Keep studying — RFID and NFC Attacks