nerdexam
CompTIA

SY0-301 · Question #759

An administrator has advised against the use of Bluetooth phones due to bluesnarfing concerns. Which of the following is an example of this threat?

The correct answer is B. Unauthorized intrusions into the phone to access data. Bluesnarfing is a specific Bluetooth attack in which an attacker gains unauthorized access to data stored on a target device, such as contacts, emails, and messages, without the owner's knowledge.

Threats, vulnerabilities, and mitigations

Question

An administrator has advised against the use of Bluetooth phones due to bluesnarfing concerns. Which of the following is an example of this threat?

Options

  • AAn attacker using the phone remotely for spoofing other phone numbers
  • BUnauthorized intrusions into the phone to access data
  • CThe Bluetooth enabled phone causing signal interference with the network
  • DAn attacker using exploits that allow the phone to be disabled

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    89% (31)
  • C
    6% (2)
  • D
    3% (1)

Why each option

Bluesnarfing is a specific Bluetooth attack in which an attacker gains unauthorized access to data stored on a target device, such as contacts, emails, and messages, without the owner's knowledge.

AAn attacker using the phone remotely for spoofing other phone numbers

Using a device remotely to spoof phone numbers describes a different threat category related to call spoofing or SIM-based attacks, not the data-theft mechanism of bluesnarfing.

BUnauthorized intrusions into the phone to access dataCorrect

Bluesnarfing exploits vulnerabilities in the Bluetooth Object Exchange (OBEX) protocol to silently connect to a target device and extract stored data including address books, calendars, text messages, and emails. The attack occurs without any indication on the victim's device, making unauthorized data intrusion the defining characteristic that distinguishes bluesnarfing from other Bluetooth attack types.

CThe Bluetooth enabled phone causing signal interference with the network

Signal interference caused by Bluetooth devices is an availability and environmental concern related to radio frequency interference, not a targeted attack on device data.

DAn attacker using exploits that allow the phone to be disabled

Disabling a phone via exploits describes a denial-of-service style attack; bluesnarfing specifically targets data exfiltration rather than device disruption.

Concept tested: Bluesnarfing Bluetooth data theft attack

Source: https://csrc.nist.gov/publications/detail/sp/800-121/rev-2/final

Topics

#bluesnarfing#Bluetooth#wireless attack#unauthorized access

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SY0-301 Practice