Zigbee GAWN Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A penetration tester is assessing a Zigbee network that uses a single network key and no APS-layer encryption. The tester has captured a valid encrypted frame from a sensor and wants to cause the coordinator to perform an action (e.g., unlock a door). The tester does not know the current frame counter for the sensor. Which approach is MOST likely to succeed?

   • AInject a frame with a random frame counter
   • BReplay the captured frame after the sensor sends a new frame with a higher counter
   • CExtract the frame counter from the captured frame and increment it
   • DPerform a denial-of-service attack to reset the coordinator's frame counter
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   You are leading a Zigbee security assessment for a hospital that uses wireless patient monitors. The assessment must not disrupt patient care, but you need to identify vulnerabilities. You have permission to passively capture traffic and to perform active tests only during a scheduled maintenance window. Which approach best balances the need for thorough testing with the constraint of not disrupting operations?

   • APerform active attacks immediately during normal operations to identify vulnerabilities quickly.
   • BPerform passive sniffing during normal operations and schedule active attacks such as packet injection and network flooding during the maintenance window.
   • COnly perform passive sniffing and avoid all active testing to ensure no disruption.
   • DSchedule all testing, including passive sniffing, during the maintenance window to minimize any risk.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which frequency band is most commonly used by Zigbee for IoT and wireless personal area networks in most regions of the world?

   • A5 GHz UNII band
   • B900 MHz ISM band
   • C60 GHz V-band
   • D2.4 GHz ISM band
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   While analyzing a Zigbee capture, you see a frame with the Frame Control field indicating a data frame, but the destination PAN ID is set to 0xFFFF. The frame is encrypted with the network key. What is the most likely purpose of this frame?

   • AIt is a corrupted frame with an invalid destination address.
   • BIt is a broadcast frame intended for all devices in the network, using the broadcast PAN ID.
   • CIt is a beacon request frame used for network discovery.
   • DIt is an inter-PAN frame sent to a different Zigbee network.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which tool is commonly used to capture and analyze Zigbee wireless traffic for security assessment?

   • AAircrack-ng
   • BWireshark with a Zigbee dissector
   • CMetasploit
   • DNmap
   Reveal Solution Discussion Select an answer first