Practical SDR Attacks GAWN Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   You are setting up an SDR to capture a wideband signal that spans 10 MHz. Your SDR has a maximum sample rate of 20 MS/s. What is the minimum sample rate you should use to avoid aliasing?

   • A10 MS/s
   • B20 MS/s
   • C5 MS/s
   • D15 MS/s
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A consultant is performing a wireless security assessment for a hospital that uses wireless medical telemetry. The consultant plans to use an SDR to capture and analyze the telemetry signals. The hospital's legal team has asked for a summary of the regulatory constraints. Which action is most appropriate before proceeding with the assessment?

   • AUse a low-power SDR to avoid any regulatory concerns, since low-power transmissions are always exempt from licensing.
   • BObtain a ham radio license to ensure all SDR activities are legally permitted.
   • COnly capture signals, not transmit, because passive monitoring is always legal in any jurisdiction.
   • DEnsure the assessment is covered by a written authorization that specifies the frequencies, duration, and location of the testing.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A penetration tester is assessing a wireless key fob that uses a rolling code. The tester has captured a valid unlock signal and wants to test whether the receiver accepts a replayed signal. The assessment scope permits replay attacks. Which action is most appropriate?

   • AUse a brute-force attack to generate all possible codes and transmit them.
   • BJam the receiver and then replay the captured signal to bypass the rolling code.
   • CReplay the captured signal immediately and observe whether the receiver accepts it.
   • DDecode the rolling code algorithm and predict the next code before replaying.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which software tool is commonly used with SDR hardware to visualize the frequency spectrum and demodulate signals in real time?

   • AMetasploit
   • BNmap
   • CGNU Radio
   • DWireshark
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   You have reverse-engineered a wireless protocol that uses a 16-bit CRC and a 32-bit rolling code. You want to perform a replay attack, but the receiver rejects replayed packets. What is the most likely reason, and what should you do?

   • AThe receiver is out of range; you need to increase transmission power.
   • BThe modulation is wrong; you need to change the modulation scheme.
   • CThe rolling code is used as an anti-replay mechanism; you need to capture a valid code and use it before it expires.
   • DThe CRC is incorrect; you need to recalculate the CRC for the replayed packet.
   Reveal Solution Discussion Select an answer first