A penetration tester noticed that an employee was using a wireless headset with a smartphone. Which of the following methods would be best to use to intercept the communications?

Question

Options

• AMultiplexing
• BBluejacking
• CZero-day attack
• DSmurf attack

• A
  4% (2)
• B
  94% (51)
• D
  2% (1)

Explanation

A wireless headset paired with a smartphone communicates over Bluetooth. Bluejacking is the Bluetooth-specific attack method among the options presented, making it the correct choice in context. In broader Bluetooth attack terminology, intercepting Bluetooth audio or data communications involves Bluetooth eavesdropping techniques (sometimes called Bluesnarfing for data theft or Bluebugging for full device control), all of which fall under the Bluetooth attack category. Multiplexing (A) is a signal transmission technique, not an attack. A zero-day attack (C) exploits unknown vulnerabilities and is not specific to wireless headsets. A Smurf attack (D) is a network-layer amplification DDoS attack entirely unrelated to Bluetooth or wireless headsets.

No community discussion yet for this question.