An analyst is using an SDR to capture a signal that appears to be a frequency-hopping spread spectrum (FHSS) transmission. The analyst wants to analyze the hopping pattern to understand the protocol. Which approach is most effective for capturing the complete hopping sequence?

Use a directional antenna to increase gain and capture the signal on a single frequency.

Use a narrowband SDR tuned to a single frequency to capture one hop at a time.

Use a wideband SDR with a high sample rate to capture the entire hopping band simultaneously.

Use a spectrum analyzer to visually observe the hops and manually record the frequencies.

You are asked to test the jamming resistance of a wireless alarm system. The client wants you to perform a jamming attack. What is the first step you should take?

Confirm the jamming attack is explicitly included in the written authorization and scope.

Use a high-power jammer to ensure the alarm is disabled.

Perform the jamming test during off-peak hours to minimize impact.

Disable the alarm's backup battery to ensure the test is effective.

A researcher has captured a signal from a wireless doorbell and demodulated it to a binary sequence. The researcher suspects the signal contains a fixed preamble followed by a device ID and a button press command. Which technique is most effective for identifying the boundaries between these fields?

Apply a fast Fourier transform (FFT) to the binary sequence to find field boundaries.

Use a brute-force search of all possible field lengths to find the most plausible structure.

Use a spectrum analyzer to identify the field boundaries based on amplitude changes.

Compare multiple captures of the same button press to identify constant and variable bits.

An engineer is setting up an SDR to capture a wideband signal. The engineer notices that the signal appears distorted and some frequencies are missing. Which parameter is most likely misconfigured?

Gain is set too high, causing clipping and distortion.

The SDR is in half-duplex mode.

Sample rate is too low, causing aliasing and loss of high-frequency components.

Antenna is not matched to the frequency band.

You are planning a jamming test for a client's wireless network. The client wants to test the resilience of their Wi-Fi network to jamming. You have a HackRF One and a high-power amplifier. What is the most important consideration before conducting the test?

Ensure the jamming test is authorized by the client and complies with local regulations, including frequency and power limits.

Perform the test in a shielded room to contain the jamming signal.

Use the highest possible power to ensure the jamming is effective.

Use a directional antenna to focus the jamming on the target network.

GIAC Assessing and Auditing Wireless Networks

Domain 6Objective 2

Practical SDR Attacks GAWN Practice Questions (Page 6)

Part of the Advanced Wireless Attacks domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 3–5 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

6concepts

Questions 26–30

26application · medium
An analyst is using an SDR to capture a signal that appears to be a frequency-hopping spread spectrum (FHSS) transmission. The analyst wants to analyze the hopping pattern to understand the protocol. Which approach is most effective for capturing the complete hopping sequence?
Select an answer first
27application · medium
You are asked to test the jamming resistance of a wireless alarm system. The client wants you to perform a jamming attack. What is the first step you should take?
Select an answer first
28application · medium
A researcher has captured a signal from a wireless doorbell and demodulated it to a binary sequence. The researcher suspects the signal contains a fixed preamble followed by a device ID and a button press command. Which technique is most effective for identifying the boundaries between these fields?
Select an answer first
29application · medium
An engineer is setting up an SDR to capture a wideband signal. The engineer notices that the signal appears distorted and some frequencies are missing. Which parameter is most likely misconfigured?
Select an answer first
30expert · hard
You are planning a jamming test for a client's wireless network. The client wants to test the resilience of their Wi-Fi network to jamming. You have a HackRF One and a high-power amplifier. What is the most important consideration before conducting the test?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GAWN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GAWN” is a trademark of its owner, used for identification only.