A security team is evaluating the risk of eavesdropping on NFC communications. They know that NFC has a very short range, but they are concerned about an attacker using a high-gain antenna to intercept signals from a distance. Which of the following is the most effective mitigation against long-distance eavesdropping?

Use a Type 5 tag with a longer range

Use a directional antenna on the reader to focus the signal

Use a higher transmit power to increase the signal-to-noise ratio

A security tester is assessing an NFC-based loyalty card system. The tester wants to create a duplicate of a legitimate NFC card to test whether the system can detect cloned cards. Which tool and technique should the tester use?

Use a Bluetooth device to read the card's memory

Use a smartphone NFC reader to read the card and then emulate it with host card emulation

Use a Proxmark3 to read the card's data and write it to a blank compatible tag

Use a software-defined radio to capture the card's RF signature and replay it

A company is designing an NFC-based payment system that must be resistant to both eavesdropping and relay attacks. The system uses card emulation mode with a secure element. Which combination of countermeasures would be most effective?

Store the payment data in plaintext on the secure element and rely on the short range of NFC.

Use a longer-range NFC antenna and require a PIN on the terminal.

Encrypt the communication channel and use a time-based challenge-response protocol.

Use a static password for authentication and disable the secure element.

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 3

NFC GAWN Practice Questions (Page 1)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

8concepts

Questions 1–5

1expert · hard
A security team is evaluating the risk of eavesdropping on NFC communications. They know that NFC has a very short range, but they are concerned about an attacker using a high-gain antenna to intercept signals from a distance. Which of the following is the most effective mitigation against long-distance eavesdropping?
Select an answer first
2application · medium
A security tester is assessing an NFC-based loyalty card system. The tester wants to create a duplicate of a legitimate NFC card to test whether the system can detect cloned cards. Which tool and technique should the tester use?
Select an answer first
3expert · hard
A company is designing an NFC-based payment system that must be resistant to both eavesdropping and relay attacks. The system uses card emulation mode with a secure element. Which combination of countermeasures would be most effective?
Select an answer first
4foundation · easy
Which frequency band does Near Field Communication (NFC) use?
Select an answer first
5foundation · easy
Which type of tool is commonly used in NFC penetration testing to read and write data to NFC tags?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

NFC GAWN Practice Questions (Page 1)

Questions 1–5

A security tester is assessing an NFC-based loyalty card system. The tester wants to create a duplicate of a legitimate NFC card to test whether the system can detect cloned cards. Which tool and technique should the tester use?

A company is designing an NFC-based payment system that must be resistant to both eavesdropping and relay attacks. The system uses card emulation mode with a secure element. Which combination of countermeasures would be most effective?

Which frequency band does Near Field Communication (NFC) use?

Which type of tool is commonly used in NFC penetration testing to read and write data to NFC tags?

Keep studying — RFID and NFC Attacks