GIAC Certified Intrusion Analyst
Domain 1Objective 1
Concepts of TCP/IP and the Link Layer GCIA Practice Questions (Page 4)
Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)
42questions here
9free pages
12concepts
Questions 16–20
- 16
In a TCP header, which field is used to acknowledge receipt of data?
Select an answer first - 17
Which of the following correctly lists the four layers of the TCP/IP model, from lowest to highest?
Select an answer first - 18
An analyst is examining an Ethernet frame and notes the destination MAC address is 00:11:22:33:44:55. The frame's EtherType is 0x0800. What can the analyst conclude about this frame?
Select an answer first - 19
In the TCP/IP model, which layer is responsible for routing packets across different networks?
Select an answer first - 20
An analyst is reviewing a packet capture and sees an IP packet with the DF bit set, a Total Length of 1500, and an Identification field of 0x1234. The packet is a TCP segment. Which of the following can be concluded from this information?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.