Skip to content
AI Security

Interview question · Network Security & Protocols

How do Bluetooth pairing, NFC payments and keyless car entry get attacked, and why does a relay defeat encryption?

Short-range radio assumes that being close means being trusted. The scored answer explains pairing models, key negotiation bugs and why relays need distance measurement, not stronger encryption.

mediumNewPreparation tags: Apple, Google, MicrosoftUpdated Nov 2026

Short-range radio assumes that being close means being trusted. The scored answer explains pairing models, key negotiation bugs and why relays need distance measurement, not stronger encryption.

Make your first attempt

What would you say before reading the answer?

  1. 01 State the assumptions your answer depends on.
  2. 02 Explain the mechanism and choose a control.
  3. 03 Name a condition that would change your decision.

The worked answer includes an approach, scoring criteria and follow-up questions. Compare the reasoning with your own.

10 answers per topic instead of 5, plus saved progress and bookmarks · costs nothingor unlock all 529 remaining answers · $25

Every worked answer in all 17 topics, every lesson in every course, the full concept curriculum, the complete practice-test bank, and the downloadable security field guides.

6 months · One payment · No auto-renewal

What if · the follow-ups in this answer

The answer works through 4 follow-ups like an interviewer would

A car-sharing company lets customers unlock cars with their phones over Bluetooth Low Energy using passive entry. Several cars are stolen at night without forced entry, while the customers' phones were inside their homes.

  1. What attack fits these facts?
  2. What stops it without changing the cars' hardware?
  3. What is the long-term fix?
  4. How do you summarise short-range wireless security?

Each rung has a nudge, a model answer, the principle that carries over and the weak answer to avoid. Premium opens every answer and ladder.

UP NEXT ON YOUR JOURNEY
Next in this trackYour network is 'IPv4 only', but every laptop and server has IPv6 enabled. What security gaps does that create, and how do you close them?Next in this trackHow does a subdomain takeover happen through dangling DNS, and how would you prevent and detect it across hundreds of cloud resources?Next in this trackDMARC is at reject, yet phishing still arrives. How do email gateways and API-based filters stop what sender authentication cannot?
DISCUSSION · 0

No comments yet. Share a correction or a different way to answer it.