During a red-team engagement, you need to test whether a wireless door sensor can be triggered by replaying a captured signal. The sensor uses a fixed 433 MHz OOK signal. Which action is most appropriate within the assessment scope?

Decode the signal and modify the payload to change the sensor's ID.

Jam the 433 MHz frequency to prevent the sensor from receiving any signal.

Capture the signal, then transmit the exact IQ sample using an SDR at the same frequency and modulation.

Use a high-power transmitter to overwhelm the sensor's receiver.

You captured a burst of an unknown wireless protocol and notice a repeating 16-bit preamble followed by a 32-bit address field and a variable-length payload. To understand the protocol's structure and identify potential injection points, which approach is most effective?

Use a spectrum analyzer to measure the signal's bandwidth and modulation type.

Replay the captured signal without analysis to see if the device responds.

Use a tool like Universal Radio Hacker to demodulate and decode the signal, then correlate fields across multiple captures.

Decode the signal using a commercial wireless protocol decoder.

What is the primary purpose of a jamming attack in a wireless network?

To passively monitor network traffic

To inject malicious data into the network

To disrupt or prevent communication by transmitting interfering signals

To capture and replay authentication messages

GIAC Assessing and Auditing Wireless Networks

Domain 6Objective 2

Practical SDR Attacks GAWN Practice Questions (Page 3)

Part of the Advanced Wireless Attacks domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 3–5 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

6concepts

Questions 11–15

11application · medium
During a red-team engagement, you need to test whether a wireless door sensor can be triggered by replaying a captured signal. The sensor uses a fixed 433 MHz OOK signal. Which action is most appropriate within the assessment scope?
Select an answer first
12application · medium
You captured a burst of an unknown wireless protocol and notice a repeating 16-bit preamble followed by a 32-bit address field and a variable-length payload. To understand the protocol's structure and identify potential injection points, which approach is most effective?
Select an answer first
13application · medium
A security team is testing the resilience of a wireless sensor network that operates at 915 MHz. They need to capture signals for analysis and later inject crafted packets. Which SDR hardware is most suitable for both tasks?
Select an answer first
14foundation · easy
Which SDR parameter determines the maximum frequency range that can be captured in a single sample?
Select an answer first
15foundation · easy
What is the primary purpose of a jamming attack in a wireless network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.

Practical SDR Attacks GAWN Practice Questions (Page 3)

Questions 11–15

During a red-team engagement, you need to test whether a wireless door sensor can be triggered by replaying a captured signal. The sensor uses a fixed 433 MHz OOK signal. Which action is most appropriate within the assessment scope?

You captured a burst of an unknown wireless protocol and notice a repeating 16-bit preamble followed by a 32-bit address field and a variable-length payload. To understand the protocol's structure and identify potential injection points, which approach is most effective?

A security team is testing the resilience of a wireless sensor network that operates at 915 MHz. They need to capture signals for analysis and later inject crafted packets. Which SDR hardware is most suitable for both tasks?

Which SDR parameter determines the maximum frequency range that can be captured in a single sample?

What is the primary purpose of a jamming attack in a wireless network?

Keep studying — Advanced Wireless Attacks