A penetration tester is evaluating the security of an NFC-based access control system that uses Type 4 tags with a secure element. The tester wants to test for unauthorized access to the secure element. Which tool and technique would be most effective?

Use a Proxmark3 to perform a brute-force attack on the secure element's authentication key.

Use a software-defined radio to capture the communication between the tag and the reader and replay it.

Use a smartphone with an NFC reader app to read the tag's memory directly.

Use a high-gain antenna to extend the range and read the tag from a distance.

A security engineer is evaluating an NFC-based ticketing system that uses ISO/IEC 18092 (NFCIP-1) for peer-to-peer communication. The engineer wants to test the system for relay attacks. Which characteristic of ISO/IEC 18092 is most relevant to this test?

It operates at 13.56 MHz with a typical range of up to 10 cm.

It defines the NFC Data Exchange Format (NDEF) for message encapsulation.

It includes a time-slot mechanism that prevents simultaneous transmissions.

It supports both active and passive communication modes.

A penetration tester is tasked with assessing the security of an NFC-based door lock system. The tester needs to identify the tag type and read the raw memory contents of the tag to look for vulnerabilities. Which tool is best suited for this task?

A Proxmark3 with the appropriate antenna

A smartphone with a generic NFC reader app

A USB NFC reader with vendor-specific software

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 3

NFC GAWN Practice Questions (Page 5)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

8concepts

Questions 21–25

21application · medium
A marketing company wants to embed NFC tags in posters. The tags will store a URL and must be readable by a wide range of smartphones. The company also wants to minimize cost. Which NFC tag type should they choose?
Select an answer first
22expert · hard
A penetration tester is evaluating the security of an NFC-based access control system that uses Type 4 tags with a secure element. The tester wants to test for unauthorized access to the secure element. Which tool and technique would be most effective?
Select an answer first
23application · medium
A security engineer is evaluating an NFC-based ticketing system that uses ISO/IEC 18092 (NFCIP-1) for peer-to-peer communication. The engineer wants to test the system for relay attacks. Which characteristic of ISO/IEC 18092 is most relevant to this test?
Select an answer first
24foundation · easy
In which NFC operating mode does an NFC device act like a contactless smart card to be read by an external reader?
Select an answer first
25application · medium
A penetration tester is tasked with assessing the security of an NFC-based door lock system. The tester needs to identify the tag type and read the raw memory contents of the tag to look for vulnerabilities. Which tool is best suited for this task?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

NFC GAWN Practice Questions (Page 5)

Questions 21–25

A marketing company wants to embed NFC tags in posters. The tags will store a URL and must be readable by a wide range of smartphones. The company also wants to minimize cost. Which NFC tag type should they choose?

A penetration tester is evaluating the security of an NFC-based access control system that uses Type 4 tags with a secure element. The tester wants to test for unauthorized access to the secure element. Which tool and technique would be most effective?

A security engineer is evaluating an NFC-based ticketing system that uses ISO/IEC 18092 (NFCIP-1) for peer-to-peer communication. The engineer wants to test the system for relay attacks. Which characteristic of ISO/IEC 18092 is most relevant to this test?

In which NFC operating mode does an NFC device act like a contactless smart card to be read by an external reader?

A penetration tester is tasked with assessing the security of an NFC-based door lock system. The tester needs to identify the tag type and read the raw memory contents of the tag to look for vulnerabilities. Which tool is best suited for this task?

Keep studying — RFID and NFC Attacks