A company is deploying NFC-enabled access badges that use card emulation mode with a secure element. The security team is concerned about relay attacks. They are considering two countermeasures: (1) adding a time-based challenge-response protocol that limits the transaction to 300 ms, and (2) requiring the user to enter a PIN on the badge reader. Which countermeasure is more effective against relay attacks, and why?

Neither is effective because relay attacks cannot be prevented.

The PIN requirement is more effective because it adds a second factor that the attacker cannot relay.

Both are equally effective because they both add an extra step to the authentication process.

The time-based challenge-response is more effective because it directly detects the latency introduced by a relay device.

A penetration tester is assessing an NFC payment system that uses ISO/IEC 14443 Type A cards. The tester has a Proxmark3 and wants to perform a man-in-the-middle attack to intercept and modify the transaction data. Which approach is most effective?

Use a smartphone with an NFC app to capture the data and replay it later

Place the Proxmark3 in relay mode to forward all communication between the card and reader, while capturing and modifying the data in real time

Use the Proxmark3 to emulate the reader and the card simultaneously, performing a man-in-the-middle attack by intercepting and altering the communication

Use a software-defined radio to jam the NFC signal and then inject modified data

GIAC Assessing and Auditing Wireless Networks

Domain 5Objective 3

NFC GAWN Practice Questions (Page 7)

Part of the RFID and NFC Attacks domain, which makes up ~17% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

8concepts

Questions 31–35

31foundation · easy
Which NFC operating mode is used when two smartphones exchange contact information by tapping them together?
Select an answer first
32foundation · easy
Which standard defines the communication protocol for NFC peer-to-peer mode?
Select an answer first
33foundation · easy
Which NFC tag type is based on the ISO/IEC 14443 Type A standard and offers the highest data transfer rate among the five NFC tag types?
Select an answer first
34expert · hard
A company is deploying NFC-enabled access badges that use card emulation mode with a secure element. The security team is concerned about relay attacks. They are considering two countermeasures: (1) adding a time-based challenge-response protocol that limits the transaction to 300 ms, and (2) requiring the user to enter a PIN on the badge reader. Which countermeasure is more effective against relay attacks, and why?
Select an answer first
35expert · hard
A penetration tester is assessing an NFC payment system that uses ISO/IEC 14443 Type A cards. The tester has a Proxmark3 and wants to perform a man-in-the-middle attack to intercept and modify the transaction data. Which approach is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

NFC GAWN Practice Questions (Page 7)

Questions 31–35

Which NFC operating mode is used when two smartphones exchange contact information by tapping them together?

Which standard defines the communication protocol for NFC peer-to-peer mode?

Which NFC tag type is based on the ISO/IEC 14443 Type A standard and offers the highest data transfer rate among the five NFC tag types?

A penetration tester is assessing an NFC payment system that uses ISO/IEC 14443 Type A cards. The tester has a Proxmark3 and wants to perform a man-in-the-middle attack to intercept and modify the transaction data. Which approach is most effective?

Keep studying — RFID and NFC Attacks