A hospital issues 125 kHz badges to staff for accessing medication rooms. An attacker stands close to a nurse in a crowded elevator with a portable device that powers up the badge and captures its ID. The security team wants to reduce the risk of this skimming attack without changing the badge form factor. Which control is most effective?

Change the badge's ID to a random value every time it is issued

Increase the reader's sensitivity so it reads badges from a greater distance

Issue badges with a shielding sleeve that must be removed before use

Require staff to tap the badge against a designated reader rather than wave it near the door

A livestock farm uses 134.2 kHz RFID ear tags to track cattle. The farm manager is concerned that an attacker could skim the tag data and clone it to steal cattle. The tags are read-only and contain only a unique ID. Which characteristic of the LF RFID system makes it particularly vulnerable to this attack?

The LF signal can be read from a distance of several meters, making it easy to skim

The tag's unique ID is transmitted in clear text and can be captured with a simple receiver

The LF signal is easily blocked by metal, which prevents the tag from being read

The tag requires a battery to transmit its ID, which makes it easier to intercept

A corporate office uses 125 kHz proximity cards for building access. An attacker is observed standing near the entrance with a device that appears to be a portable reader. The attacker is capturing card data as employees walk past. Which control would be most effective in preventing this skimming attack while still allowing employees to enter quickly?

Ask employees to hold their cards in their hands while walking through the entrance

Increase the reader's output power so it can read cards from a greater distance

Use a longer-range reader so employees do not need to stop at the entrance

Require employees to present their cards to a reader that is recessed in a shielded enclosure

Which control is most appropriate to prevent unauthorized reading of LF RFID tags in a secure facility?

Placing readers at all entrances

Increasing the tag's read range

Using a Faraday cage around the tag storage area

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 1

Low-Frequency RFID Attacks GAWN Practice Questions (Page 7)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

Questions 31–34

31application · medium
A hospital issues 125 kHz badges to staff for accessing medication rooms. An attacker stands close to a nurse in a crowded elevator with a portable device that powers up the badge and captures its ID. The security team wants to reduce the risk of this skimming attack without changing the badge form factor. Which control is most effective?
Select an answer first
32application · medium
A livestock farm uses 134.2 kHz RFID ear tags to track cattle. The farm manager is concerned that an attacker could skim the tag data and clone it to steal cattle. The tags are read-only and contain only a unique ID. Which characteristic of the LF RFID system makes it particularly vulnerable to this attack?
Select an answer first
33application · medium
A corporate office uses 125 kHz proximity cards for building access. An attacker is observed standing near the entrance with a device that appears to be a portable reader. The attacker is capturing card data as employees walk past. Which control would be most effective in preventing this skimming attack while still allowing employees to enter quickly?
Select an answer first
34foundation · easy
Which control is most appropriate to prevent unauthorized reading of LF RFID tags in a secure facility?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Low-Frequency RFID Attacks GAWN Practice Questions (Page 7)

Questions 31–34

Which control is most appropriate to prevent unauthorized reading of LF RFID tags in a secure facility?

Keep studying — RFID and NFC Attacks