CPENT Iot And OT Exploitation Practice Question
A penetration tester is analyzing an IoT mobile companion app that communicates with a smart thermostat via BLE (Bluetooth Low Energy). Which tool can the tester use on a rooted Android device to intercept and inspect BLE GATT characteristics and descriptors?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
nRF Connect for Mobile
GATT Explorer or specialized dynamic instrumentation frameworks like Frida or BLE sniffing tools on Android are used, but specifically for intercepting and manipulating BLE traffic locally on the device, 'GATTacker' or apps like 'nRF Connect' / 'Frida scripts' are deployed. Among standard choices, nRF Connect is the industry-standard diagnostic and testing tool for BLE.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Hydra
Why it's wrong here
Hydra is a fast network login cracker supporting numerous protocols, not BLE.
- ✗
Sqlmap
Why it's wrong here
Sqlmap is an automated SQL injection and database takeover tool.
- ✗
Aircrack-ng
Why it's wrong here
Aircrack-ng is designed for 802.11 wireless network auditing, not Bluetooth Low Energy.
- ✓
nRF Connect for Mobile
Why this is correct
nRF Connect allows testers to scan, read, write, and subscribe to BLE GATT characteristics and descriptors on Android and iOS.
About these practice questions
Courseiva writes every CPENT question from scratch — 274 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official EC-Council exam blueprint
This CPENT practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CPENT exam.