GIAC GSLC Exam - Topic 5 Question 52 Discussion

Actual exam question for GIAC's GSLC exam

Question #: 52
Topic #: 5

An executive in your company reports odd behavior on her PDA. After investigation you discover that a trusted device is actually copying data off the PDA. The executive tells you that the behavior started shortly after accepting an e-business card from an unknown person. What type of attack is this?

APDA Hijacking

BSession Hijacking

CPrivilege Escalation

DBluesnarfing

Show Suggested Answer

Suggested Answer: C

by Penney at Jul 13, 2024, 04:30 AM

Limited Time Offer

25%

Off

Get Premium GSLC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Adaline

8 months ago

Wait, can a simple e-business card really lead to this?

upvoted 0 times

...

Yasuko

9 months ago

Agreed, but Bluesnarfing fits better here.

upvoted 0 times

...

Kaitlyn

9 months ago

I thought PDA hijacking was more common in these cases?

upvoted 0 times

...

Beckie

9 months ago

Definitely, that e-business card could have been a trap!

upvoted 0 times

...

Louvenia

9 months ago

Sounds like a classic case of Bluesnarfing.

upvoted 0 times

...

Xochitl

9 months ago

I’m a bit confused about the differences between these terms. Wasn't there something about Session Hijacking being more about web sessions?

upvoted 0 times

...

Velda

10 months ago

I practiced a question similar to this, and I think the key detail is that it started after accepting an e-business card. That makes me lean towards Bluesnarfing.

upvoted 0 times

...

Britt

10 months ago

I'm not entirely sure, but I feel like this could also be a form of PDA Hijacking. It seems like the device is being compromised somehow.

upvoted 0 times

...

Claudio

10 months ago

I remember studying about different types of attacks, and I think this might be related to Bluesnarfing since it involves unauthorized access to data on a device.

upvoted 0 times

...

Cherelle

10 months ago

I'm a little confused on the difference between Bluesnarfing and PDA Hijacking. Could this potentially be a PDA Hijacking attack as well? I want to make sure I fully understand the distinctions before answering.

upvoted 0 times

...

Mireya

10 months ago

Bluesnarfing, for sure. The executive accepting an unknown card and then seeing data being copied is a classic Bluesnarfing scenario. I feel pretty confident about this one.

upvoted 0 times

...

Eladia

10 months ago

Hmm, I'm not totally sure about this one. Could it also be a session hijacking attack if the attacker is somehow intercepting the PDA's data transfer? I'll have to think this through a bit more.

upvoted 0 times

...

Raelene

10 months ago

This one seems pretty straightforward. The executive accepting an e-business card from an unknown person and then seeing odd behavior on the PDA suggests a Bluesnarfing attack.

upvoted 0 times

...

Elin

10 months ago

Okay, let me see. The key details here are the unknown e-business card and the data being copied off the PDA. I think Bluesnarfing is the most likely answer, but I'll double-check the definitions just to be sure.

upvoted 0 times

...

Kristin

10 months ago

This looks like a pretty straightforward question about importing an XML schema into a WSDL document. I'll carefully review the schema and the WSDL code fragments to determine the correct way to do this.

upvoted 0 times

...

Arlyne

10 months ago

This question seems a bit tricky. I'm not totally confident in my understanding of all the PPP protocol details. I'll try to eliminate the options that don't seem relevant, and then make an educated guess.

upvoted 0 times

...

Rebeca

10 months ago

I'm pretty confident the answer is B - Cohesive. That characteristic ensures the requirements work together as a unified whole to fulfill the project's objectives. The other options don't seem to directly address that idea of supporting the overall purpose and scope.

upvoted 0 times

...

Ricki

1 year ago

Wait, is this a trick question? Maybe the executive is just really bad at managing their PDA and the 'odd behavior' is just user error.

upvoted 0 times

...

Reynalda

1 year ago

I don't know, but maybe the attacker is just trying to get a Bluetooth headset to play some tunes. Bluesnarfing could be the answer here.

upvoted 0 times

Dannette

1 year ago

D) Bluesnarfing

upvoted 0 times

...

Ilda

1 year ago

C) Privilege Escalation

upvoted 0 times

...

Alise

1 year ago

B) Session Hijacking

upvoted 0 times

...

Cherelle

1 year ago

A) PDA Hijacking

upvoted 0 times

...

Gary

1 year ago

Come on, guys, it's obviously PDA Hijacking. The executive's device is being copied, which is a clear sign of that attack vector.

upvoted 0 times

...

Daniel

1 year ago

Hmm, I'm not convinced. Privilege Escalation seems like a more likely scenario, where the attacker is trying to gain higher levels of access on the PDA.

upvoted 0 times

Gabriele

1 year ago

C: I agree with you, Privilege Escalation makes sense in this situation.

upvoted 0 times

...

Isaiah

1 year ago

B: I think it could be PDA Hijacking, where the attacker takes control of the device remotely.

upvoted 0 times

...

Youlanda

1 year ago

A: It sounds like Bluesnarfing to me, where unauthorized access is gained through Bluetooth.

upvoted 0 times

...

Latrice

1 year ago

I'm not sure about that. The question mentions an e-business card, which sounds more like a social engineering attack to me. I'd go with Session Hijacking.

upvoted 0 times

Renato

1 year ago

That makes sense. It's definitely a form of attack on the PDA.

upvoted 0 times

...

Cheryl

1 year ago

I agree, Bluesnarfing is when unauthorized access is gained to information on a wireless device through a Bluetooth connection.

upvoted 0 times

...

Jess

1 year ago

I think it's Bluesnarfing.

upvoted 0 times

...

Margret

1 year ago

This seems like a classic case of Bluesnarfing, where the attacker is able to access data on a Bluetooth-enabled device without the owner's knowledge or consent.

upvoted 0 times