Discuss EC-Council ECSS Exam Topic 3 Question 121

James is a professional hacker attempting to gain access to an industrial system through a remote control device. In this process, he used a specially designed radio transceiver device to sniff radio commands and inject arbitrary code into the firmware of the remote controllers to maintain persistence.

Which of the following attacks is performed by James in the above scenario?

AMalicious reprogramming attack

BRe pairing with a malicious RF controller

CCommand injection

DAbusing reprogramming attack

Suggested Answer: A

James is performing amalicious reprogramming attackin the given scenario. He uses a specially designed radio transceiver device to sniff radio commands and inject arbitrary code into the firmware of the remote controllers. This allows him to maintain persistence and potentially gain unauthorized access to the industrial system.

EC-Council Certified Security Specialist (E|CSS) documents and study guide12.

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

17 comments · newest first

Julianna 1 month ago

Good points! I’m leaning towards C) now.

Ranee 1 month ago

Yeah, the way he maintains persistence points to that.

Bok 1 month ago

Exactly! Command injection is more about exploiting the system.

Antonio 2 months ago

True, but the focus is on firmware manipulation.

Julianna 2 months ago

But what about B) Re pairing with a malicious RF controller? Sounds plausible too.

Ranee 2 months ago

I agree with Bok. Command injection fits best.

Bok 2 months ago

I feel like it's C) Command injection. He’s injecting code, right?

Antonio 2 months ago

This is tricky! I think it's A) Malicious reprogramming attack.

Dylan 2 months ago

Nah, it’s definitely abusing reprogramming attack.

Charlene 3 months ago

I think it's more about re-pairing with a malicious RF controller.

Stanton 3 months ago

Wait, can he really inject code like that? Seems risky.

Madalyn 3 months ago

Definitely a malicious reprogramming attack!

Glory 3 months ago

Sounds like a classic command injection attack.

Sommer 3 months ago

I vaguely recall a practice question about abusing reprogramming attacks, but I’m not confident if that fits this scenario.

Dong 3 months ago

I feel like re-pairing with a malicious RF controller could be a possibility too, but it seems more about intercepting signals than reprogramming.

Dick 4 months ago

I’m not entirely sure, but I remember something about command injection being related to sending unauthorized commands. Could that apply here?

Ilene 4 months ago

I think this might be a malicious reprogramming attack since he’s modifying the firmware of the remote controllers.

EC-Council ECSS Exam - Topic 3 Question 121 Discussion