312-50V12 · Question #32
Richard, an attacker, aimed to hack IoT devices connected to a target network. In this process, Richard recorded the frequency required to share information between connected devices. After obtaining
The correct answer is D. Replay attack. Richard captured legitimate IoT radio frequency signals and replayed them to impersonate authorized devices, which is the definition of a replay attack.
Question
Options
- ACryptanalysis attack
- BReconnaissance attack
- CSide-channel attack
- DReplay attack
How the community answered
(23 responses)- A13% (3)
- B4% (1)
- C9% (2)
- D74% (17)
Why each option
Richard captured legitimate IoT radio frequency signals and replayed them to impersonate authorized devices, which is the definition of a replay attack.
A cryptanalysis attack focuses on breaking encryption algorithms or ciphertext to recover plaintext; Richard did not attempt to decrypt or analyze any cryptographic scheme.
A reconnaissance attack is a passive information-gathering phase used to discover targets and network topology; Richard went beyond reconnaissance by actively injecting captured signals into the network.
A side-channel attack exploits physical implementation information such as power consumption, electromagnetic emissions, or timing data to extract secrets, which is unrelated to capturing and replaying RF command signals.
A replay attack involves intercepting valid data transmissions and retransmitting them to deceive the target system. Richard followed the exact replay attack methodology: capturing the RF frequency, recording original command signals using URH (Universal Radio Hacker), and re-injecting those captured signals on the same frequency to make the IoT network respond as if legitimate commands were issued.
Concept tested: IoT replay attack using RF signal capture
Source: https://www.cisa.gov/sites/default/files/publications/understanding-and-mitigating-rf-replay-attacks_508.pdf
Topics
Community Discussion
No community discussion yet for this question.