What Bluetooth pairing mode is "Numeric Comparison" and how does it protect against MITM attacks compared to "Just Works"?
- A.B) Numeric Comparison is identical to Just Works except that it requires a PIN entry on one device only, which provides weak but present MITM protection.
- B.A) Numeric Comparison displays a 6-digit number on both devices and requires the user to confirm they match; this proves both devices are communicating directly and prevents a MITM from inserting a different key exchange, unlike Just Works which has no MITM protection.
- C.C) Numeric Comparison is only available on Bluetooth Classic; BLE always uses Just Works regardless of device capability.
- D.D) Numeric Comparison uses a public-key certificate from the device manufacturer, validated against a cloud PKI, to prevent MITM attacks.
Why B is correct