nerdexam
GIAC

GPEN · Question #367

One of the sales people in your company complains that sometimes he gets a lot of unsolicited messages on his PDA. After asking a few questions, you determine that the issue only occurs in crowded are

The correct answer is B. Blue jacking. Bluejacking is the practice of sending unsolicited messages to nearby Bluetooth-enabled devices without pairing, which explains why the issue only occurs in crowded public spaces where attackers are physically close.

Penetration Testing Foundations & Reconnaissance

Question

One of the sales people in your company complains that sometimes he gets a lot of unsolicited messages on his PDA. After asking a few questions, you determine that the issue only occurs in crowded areas like airports. What is the most likely problem?

Options

  • ABlue snarfing
  • BBlue jacking
  • CA virus
  • DSpam

How the community answered

(47 responses)
  • A
    6% (3)
  • B
    77% (36)
  • C
    4% (2)
  • D
    13% (6)

Why each option

Bluejacking is the practice of sending unsolicited messages to nearby Bluetooth-enabled devices without pairing, which explains why the issue only occurs in crowded public spaces where attackers are physically close.

ABlue snarfing

Bluesnarfing involves unauthorized access to and exfiltration of data (contacts, calendar entries, emails) from a Bluetooth device without the owner's consent, which is distinct from simply sending unsolicited messages.

BBlue jackingCorrect

Bluejacking sends anonymous, unsolicited messages to Bluetooth-enabled devices within short range (roughly 10 meters) by exploiting the Bluetooth contact-sharing or business card feature, requiring no pairing or authentication. The fact that the problem only occurs in crowded areas like airports is the key indicator, as attackers need physical proximity and crowded spaces provide both opportunity and anonymity. This matches the scenario precisely since no data is stolen, only unwanted messages are received.

CA virus

A virus would not selectively activate only in crowded physical locations, as malware spreads through infected files or software and is not triggered by geographic proximity to other people.

DSpam

Spam refers to bulk unsolicited messages sent over email or internet protocols and is not geographically constrained to crowded physical areas or dependent on short-range wireless proximity.

Concept tested: Bluetooth bluejacking proximity-based unsolicited messaging

Source: https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/

Topics

#Bluetooth#bluejacking#wireless attacks#mobile security

Community Discussion

No community discussion yet for this question.

Full GPEN Practice