GPEN · Question #2
An executive in your company reports odd behavior on her PDA. After investigation you discover that a trusted device is actually copying data off the PDA. The executive tells you that the behavior sta
The correct answer is D. Bluesnarfing. Bluesnarfing is a Bluetooth-based attack where an attacker gains unauthorized access to data on a victim's device, often initiated through a seemingly legitimate Bluetooth contact exchange.
Question
An executive in your company reports odd behavior on her PDA. After investigation you discover that a trusted device is actually copying data off the PDA. The executive tells you that the behavior started shortly after accepting an e-business card from an unknown person. What type of attack is this?
Options
- ASession Hijacking
- BPDA Hijacking
- CPrivilege Escalation
- DBluesnarfing
How the community answered
(17 responses)- B12% (2)
- C6% (1)
- D82% (14)
Why each option
Bluesnarfing is a Bluetooth-based attack where an attacker gains unauthorized access to data on a victim's device, often initiated through a seemingly legitimate Bluetooth contact exchange.
Session hijacking involves taking over an active authenticated network session, typically by stealing session tokens, not exploiting Bluetooth pairing.
PDA Hijacking is not a recognized standard attack category in security nomenclature - it does not describe a specific technical attack vector.
Privilege escalation involves gaining higher system permissions after initial access, not the unauthorized Bluetooth-based data exfiltration described in this scenario.
Bluesnarfing exploits Bluetooth protocol vulnerabilities to allow an attacker's device to pair as trusted and then silently copy contacts, messages, and files off the victim's PDA. The e-business card exchange via Bluetooth is the classic vector for establishing this unauthorized trusted pairing relationship.
Concept tested: Bluetooth Bluesnarfing attack identification
Source: https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/
Topics
Community Discussion
No community discussion yet for this question.