CompTIA CySA+ (CS0-001) — Question 208

A red team actor observes it is common practice to allow cell phones to charge on company computers, but access to the memory storage is blocked. Which of the following are common attack techniques that take advantage of this practice? (Choose two.)

Answer options

• A. A USB attack that tricks the computer into thinking the connected device is a keyboard, and then sends characters one at a time as a keyboard to launch the attack (a prerecorded series of keystrokes)
• B. A USB attack that turns the connected device into a rogue access point that spoofs the configured wireless SSIDs
• C. A Bluetooth attack that modifies the device registry (Windows PCs only) to allow the flash drive to mount, and then launches a Java applet attack
• D. A Bluetooth peering attack called "Snarfing" that allows Bluetooth connections on blocked device types if physically connected to a USB port
• E. A USB attack that tricks the system into thinking it is a network adapter, then runs a user password hash gathering utility for offline password cracking

Correct answer: C, D

Explanation

The correct options, C and D, involve exploiting the Bluetooth functionality and registry modifications to bypass storage access restrictions. Options A, B, and E focus on USB attacks that do not specifically leverage the charging-only condition of the devices, making them less relevant in this context.