Which defense is specifically effective against skimming attacks on LF RFID cards?

Using a metal-lined wallet or card sleeve

Using a longer antenna in the card

Increasing the card's memory size

Storing the card in a plastic holder

A pharmaceutical warehouse uses 125 kHz RFID badges to control access to its cold-storage vault. A security audit reveals that a rogue device placed near the vault door could capture badge transmissions during the authentication handshake. The facility manager wants to prevent this specific interception without replacing the existing badges or readers. Which control is most effective?

Reduce the reader polling interval so the badge is energized for a shorter time

Increase the output power of the readers so the signal-to-noise ratio at the door is higher

Switch the badges to a higher-frequency RFID standard that is inherently immune to eavesdropping

Deploy a Faraday-shielded vestibule around the vault door so all LF transmissions are contained

A logistics company uses a 125 kHz RFID system to track packages on a conveyor belt. The system has been experiencing intermittent read failures, and you suspect a denial-of-service attack. Which action would be the most effective first step to confirm whether the failures are caused by RF jamming?

Check the reader's antenna cable for loose connections

Check the backend database for errors in the tag data

Use a spectrum analyzer to look for a strong signal at 125 kHz when the failures occur

Replace the reader with a new one to see if the failures stop

A small business uses 125 kHz RFID tags on employee badges for time tracking. An employee discovers that the badge's ID is a simple sequential number and creates a duplicate badge using a writable LF tag. The owner wants to prevent this without changing the time-tracking software. Which control is most effective?

Use a random, non-sequential ID for each badge

Add a checksum to the ID that is verified by the reader

Use a tag that supports a challenge-response authentication protocol

Increase the reader's polling frequency to detect duplicate badges faster

Which communication channel in an LF RFID system is most susceptible to eavesdropping?

The wireless link between reader and tag

The wired connection between reader and host

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 1

Low-Frequency RFID Attacks GAWN Practice Questions (Page 6)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

Questions 26–30

26foundation · easy
Which defense is specifically effective against skimming attacks on LF RFID cards?
Select an answer first
27application · medium
A pharmaceutical warehouse uses 125 kHz RFID badges to control access to its cold-storage vault. A security audit reveals that a rogue device placed near the vault door could capture badge transmissions during the authentication handshake. The facility manager wants to prevent this specific interception without replacing the existing badges or readers. Which control is most effective?
Select an answer first
28application · medium
A logistics company uses a 125 kHz RFID system to track packages on a conveyor belt. The system has been experiencing intermittent read failures, and you suspect a denial-of-service attack. Which action would be the most effective first step to confirm whether the failures are caused by RF jamming?
Select an answer first
29application · medium
A small business uses 125 kHz RFID tags on employee badges for time tracking. An employee discovers that the badge's ID is a simple sequential number and creates a duplicate badge using a writable LF tag. The owner wants to prevent this without changing the time-tracking software. Which control is most effective?
Select an answer first
30foundation · easy
Which communication channel in an LF RFID system is most susceptible to eavesdropping?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Low-Frequency RFID Attacks GAWN Practice Questions (Page 6)

Questions 26–30

Which defense is specifically effective against skimming attacks on LF RFID cards?

A logistics company uses a 125 kHz RFID system to track packages on a conveyor belt. The system has been experiencing intermittent read failures, and you suspect a denial-of-service attack. Which action would be the most effective first step to confirm whether the failures are caused by RF jamming?

Which communication channel in an LF RFID system is most susceptible to eavesdropping?

Keep studying — RFID and NFC Attacks