Zigbee GAWN Practice Questions (Page 10)

Questions 46–48

1. 46application · medium

   A security researcher is testing a Zigbee network that uses a known default network key. The researcher wants to inject a forged command frame that will be accepted by a target end device. Which set of fields must the researcher correctly set in the injected frame to make the target accept it?

   • ASource and destination network addresses, PAN ID, and a valid frame counter
   • BThe coordinator's extended address and the security suite indicator
   • COnly the destination network address and the PAN ID
   • DThe network key and the link key
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A consultant is performing a Zigbee security assessment for a hospital that uses wireless patient monitors. The consultant wants to identify all Zigbee networks in the facility and their channels without causing disruption. Which technique should the consultant use first?

   • APassive channel scanning with a Zigbee sniffer
   • BDeauthentication attack to force re-association
   • CActive network discovery by sending beacon requests
   • DJamming the 2.4 GHz band to force devices to change channels
   Reveal Solution Discussion Select an answer first
3. 48expert · hard

   During a Zigbee assessment, you have obtained the network key and want to perform a device impersonation attack against a smart lock. You plan to send a command to unlock the door. Which combination of steps is necessary for the impersonation to succeed?

   • AReplay a previously captured unlock command without modification.
   • BSpoof the source address of the legitimate device, use the network key to encrypt the frame, and ensure the frame counter is higher than the last one accepted by the lock.
   • CUse the coordinator's address as the source and send a broadcast command.
   • DSpoof the destination address of the lock and send the frame without encryption.
   Reveal Solution Discussion Select an answer first