nerdexam
GIAC

GPEN · Question #197

One of the sales people in your company complains that sometimes he gets a lot of unsolicited messages on his PDA. After asking a few questions, you determine that the issue only occurs in crowded…

The correct answer is C. Blue jacking. Unsolicited messages received only in crowded public spaces point to bluejacking, which exploits short-range Bluetooth proximity.

Exploitation & Post-Exploitation Techniques

Question

One of the sales people in your company complains that sometimes he gets a lot of unsolicited messages on his PDA. After asking a few questions, you determine that the issue only occurs in crowded areas like airports. What is the most likely problem?

Options

  • AA virus
  • BSpam
  • CBlue jacking
  • DBlue snarfing

How the community answered

(41 responses)
  • A
    2% (1)
  • B
    5% (2)
  • C
    78% (32)
  • D
    15% (6)

Why each option

Unsolicited messages received only in crowded public spaces point to bluejacking, which exploits short-range Bluetooth proximity.

AA virus

A virus infection is not limited to proximity in crowded areas and spreads through software execution, not wireless broadcast.

BSpam

Spam refers to unsolicited bulk email and is delivered over the internet, not triggered by physical location near other devices.

CBlue jackingCorrect

Bluejacking is the practice of sending unsolicited messages to Bluetooth-enabled devices within range, typically around 10 meters. It is most prevalent in crowded areas such as airports because many devices are in close proximity, increasing the likelihood of discovering targets. Unlike bluesnarfing, bluejacking does not require pairing and only pushes messages to the victim's device.

DBlue snarfing

Bluesnarfing involves unauthorized access to and theft of data from a Bluetooth device, not the sending of unsolicited messages to it.

Concept tested: Bluetooth attack types bluejacking vs bluesnarfing

Topics

#Bluetooth security#bluejacking#wireless attacks#unsolicited messages

Community Discussion

No community discussion yet for this question.

Full GPEN Practice