CAS-003 · Question #490
A security engineer is assessing a new IoT product. The product interfaces with the ODBII port of a vehicle and uses a Bluetooth connection to relay data to an onboard data logger located in the…
The correct answer is B. Wireless protocol analyzer. A relay attack in this context targets the Bluetooth wireless link between the OBD-II interface and the onboard data logger. In a relay attack, an adversary intercepts wireless communications and retransmits them, potentially bypassing distance-based or cryptographic controls…
Question
A security engineer is assessing a new IoT product. The product interfaces with the ODBII port of a vehicle and uses a Bluetooth connection to relay data to an onboard data logger located in the vehicle. The data logger can only transfer data over a custom USB cable. The engineer suspects a relay attack is possible against the cryptographic implementation used to secure messages between segments of the system. Which of the following tools should the engineer use to confirm the analysis?
Options
- ABinary decompiler
- BWireless protocol analyzer
- CLog analysis and reduction tools
- DNetwork-based fuzzer
How the community answered
(23 responses)- A9% (2)
- B57% (13)
- C22% (5)
- D13% (3)
Explanation
A relay attack in this context targets the Bluetooth wireless link between the OBD-II interface and the onboard data logger. In a relay attack, an adversary intercepts wireless communications and retransmits them, potentially bypassing distance-based or cryptographic controls. A wireless protocol analyzer (such as Wireshark with a Bluetooth adapter, or a dedicated Bluetooth sniffer) allows the engineer to capture, inspect, and analyze the Bluetooth traffic in real time to detect whether messages are being relayed or if the cryptographic handshake can be exploited. A binary decompiler (A) is used for analyzing compiled firmware, not live wireless traffic. Log analysis tools (C) are useful for post-hoc review but cannot confirm an active relay attack. A network-based fuzzer (D) probes for input-handling vulnerabilities rather than confirming relay attack scenarios.
Topics
Community Discussion
No community discussion yet for this question.