GIAC GSLC Exam - Topic 5 Question 52 Discussion

Actual exam question for GIAC's GSLC exam

Question #: 52
Topic #: 5

An executive in your company reports odd behavior on her PDA. After investigation you discover that a trusted device is actually copying data off the PDA. The executive tells you that the behavior started shortly after accepting an e-business card from an unknown person. What type of attack is this?

APDA Hijacking

BSession Hijacking

CPrivilege Escalation

DBluesnarfing

Show Suggested Answer

Suggested Answer: C

by Penney at Jul 13, 2024, 04:30 AM

Limited Time Offer

25%

Off

Get Premium GSLC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Adaline

6 months ago

Wait, can a simple e-business card really lead to this?

upvoted 0 times

...

Yasuko

6 months ago

Agreed, but Bluesnarfing fits better here.

upvoted 0 times

...

Kaitlyn

6 months ago

I thought PDA hijacking was more common in these cases?

upvoted 0 times

...

Beckie

7 months ago

Definitely, that e-business card could have been a trap!

upvoted 0 times

...

Louvenia

7 months ago

Sounds like a classic case of Bluesnarfing.

upvoted 0 times

...

Xochitl

7 months ago

I’m a bit confused about the differences between these terms. Wasn't there something about Session Hijacking being more about web sessions?

upvoted 0 times

...

Velda

7 months ago

I practiced a question similar to this, and I think the key detail is that it started after accepting an e-business card. That makes me lean towards Bluesnarfing.

upvoted 0 times

...

Britt

8 months ago

I'm not entirely sure, but I feel like this could also be a form of PDA Hijacking. It seems like the device is being compromised somehow.

upvoted 0 times

...

Claudio

8 months ago

I remember studying about different types of attacks, and I think this might be related to Bluesnarfing since it involves unauthorized access to data on a device.

upvoted 0 times

...

Cherelle

8 months ago

I'm a little confused on the difference between Bluesnarfing and PDA Hijacking. Could this potentially be a PDA Hijacking attack as well? I want to make sure I fully understand the distinctions before answering.

upvoted 0 times

...

Mireya

8 months ago

Bluesnarfing, for sure. The executive accepting an unknown card and then seeing data being copied is a classic Bluesnarfing scenario. I feel pretty confident about this one.

upvoted 0 times

...

Eladia

8 months ago

Hmm, I'm not totally sure about this one. Could it also be a session hijacking attack if the attacker is somehow intercepting the PDA's data transfer? I'll have to think this through a bit more.

upvoted 0 times

...

Raelene

8 months ago

This one seems pretty straightforward. The executive accepting an e-business card from an unknown person and then seeing odd behavior on the PDA suggests a Bluesnarfing attack.

upvoted 0 times

...

Elin

8 months ago

Okay, let me see. The key details here are the unknown e-business card and the data being copied off the PDA. I think Bluesnarfing is the most likely answer, but I'll double-check the definitions just to be sure.

upvoted 0 times

...

Kristin

8 months ago

This looks like a pretty straightforward question about importing an XML schema into a WSDL document. I'll carefully review the schema and the WSDL code fragments to determine the correct way to do this.

upvoted 0 times

...

Arlyne

8 months ago

This question seems a bit tricky. I'm not totally confident in my understanding of all the PPP protocol details. I'll try to eliminate the options that don't seem relevant, and then make an educated guess.

upvoted 0 times

...

Rebeca

8 months ago

I'm pretty confident the answer is B - Cohesive. That characteristic ensures the requirements work together as a unified whole to fulfill the project's objectives. The other options don't seem to directly address that idea of supporting the overall purpose and scope.

upvoted 0 times

...

Ricki

1 year ago

Wait, is this a trick question? Maybe the executive is just really bad at managing their PDA and the 'odd behavior' is just user error.

upvoted 0 times

...

Reynalda

1 year ago

I don't know, but maybe the attacker is just trying to get a Bluetooth headset to play some tunes. Bluesnarfing could be the answer here.

upvoted 0 times

Dannette

11 months ago

D) Bluesnarfing

upvoted 0 times

...

Ilda

12 months ago

C) Privilege Escalation

upvoted 0 times

...

Alise

12 months ago

B) Session Hijacking

upvoted 0 times

...

Cherelle

1 year ago

A) PDA Hijacking

upvoted 0 times

...

Gary

1 year ago

Come on, guys, it's obviously PDA Hijacking. The executive's device is being copied, which is a clear sign of that attack vector.

upvoted 0 times

...

Daniel

1 year ago

Hmm, I'm not convinced. Privilege Escalation seems like a more likely scenario, where the attacker is trying to gain higher levels of access on the PDA.

upvoted 0 times

Gabriele

11 months ago

C: I agree with you, Privilege Escalation makes sense in this situation.

upvoted 0 times

...

Isaiah

11 months ago

B: I think it could be PDA Hijacking, where the attacker takes control of the device remotely.

upvoted 0 times

...

Youlanda

1 year ago

A: It sounds like Bluesnarfing to me, where unauthorized access is gained through Bluetooth.

upvoted 0 times

...

Latrice

1 year ago

I'm not sure about that. The question mentions an e-business card, which sounds more like a social engineering attack to me. I'd go with Session Hijacking.

upvoted 0 times

Renato

12 months ago

That makes sense. It's definitely a form of attack on the PDA.

upvoted 0 times

...

Cheryl

1 year ago

I agree, Bluesnarfing is when unauthorized access is gained to information on a wireless device through a Bluetooth connection.

upvoted 0 times

...

Jess

1 year ago

I think it's Bluesnarfing.

upvoted 0 times

...

Margret

1 year ago

This seems like a classic case of Bluesnarfing, where the attacker is able to access data on a Bluetooth-enabled device without the owner's knowledge or consent.

upvoted 0 times