GSLC · Question #442
Which of the following are considered Bluetooth security violations? Each correct answer represents a complete solution. Choose two.
The correct answer is A. Bluebug attack B. Bluesnarfing. Bluebug and Bluesnarfing are Bluetooth-specific attacks that exploit the Bluetooth protocol to gain unauthorized access to device data or functionality.
Question
Which of the following are considered Bluetooth security violations? Each correct answer represents a complete solution. Choose two.
Options
- ABluebug attack
- BBluesnarfing
- CSQL injection attack
- DSocial engineering
- ECross site scripting attack
How the community answered
(65 responses)- A94% (61)
- C3% (2)
- D2% (1)
- E2% (1)
Why each option
Bluebug and Bluesnarfing are Bluetooth-specific attacks that exploit the Bluetooth protocol to gain unauthorized access to device data or functionality.
Bluebug is a Bluetooth attack that exploits vulnerabilities in Bluetooth-enabled phones to gain unauthorized control over AT commands, allowing attackers to make calls, send messages, or access data without user knowledge.
Bluesnarfing is a Bluetooth attack that allows an attacker to wirelessly access and steal data - such as contacts, calendars, and messages - from a Bluetooth-enabled device without pairing authorization.
SQL injection targets web applications and databases by injecting malicious SQL queries through input fields; it has no relationship to the Bluetooth protocol.
Social engineering is a psychological manipulation technique used across many contexts and is not a Bluetooth-specific protocol violation or technical attack.
Cross-site scripting (XSS) is a web application attack that injects malicious scripts into web pages viewed by other users and is unrelated to Bluetooth communications.
Concept tested: Bluetooth-specific attack types - Bluebug and Bluesnarfing
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-121r2.pdf
Topics
Community Discussion
No community discussion yet for this question.