Practical SDR Attacks GAWN Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which ethical principle is most important when conducting SDR-based wireless attacks during a security assessment?

   • AUsing the most powerful transmitter available
   • BMinimizing harm and staying within the agreed scope
   • CMaximizing the impact of the attack to prove a point
   • DKeeping the assessment results confidential from the client
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which SDR attack involves capturing a valid wireless transmission and transmitting it again at a later time to trigger an unauthorized action?

   • AJamming attack
   • BReplay attack
   • CInjection attack
   • DEavesdropping attack
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   You are performing a wireless security assessment for a client. You have captured a signal that appears to be from a neighboring company's wireless device. What is the most ethical and legal course of action?

   • AStop analyzing the signal and inform the client of the unintended capture.
   • BUse the signal to test the client's devices for interference.
   • CIgnore the signal and delete the capture.
   • DContinue analyzing the signal to determine if it poses a threat to the client.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   When analyzing a captured wireless signal with an SDR, which characteristic is typically determined by measuring the time between successive identical points in the waveform?

   • ABandwidth
   • BFrequency
   • CPhase
   • DAmplitude
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   You are assessing a wireless sensor network that uses a proprietary protocol. You have captured a signal and reverse-engineered the packet structure: a 4-bit sync, 8-bit device ID, 8-bit command, and 16-bit CRC. You want to inject a command to turn on a device. Which approach is most likely to succeed?

   • AJam the channel and send a raw packet with a guessed device ID.
   • BUse a brute-force attack to try all possible command values.
   • CCapture a valid packet from the target device, modify the command field, recalculate the CRC, and transmit the packet.
   • DReplay a previously captured packet from the target device without modification.
   Reveal Solution Discussion Select an answer first