Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
GIAC (SANS) logo

GIAC Certified Intrusion Analyst

Domain 1Objective 1

Concepts of TCP/IP and the Link Layer GCIA Practice Questions (Page 7)

Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here
9free pages
12concepts

Questions 31–35

  1. 31expert · hard

    A packet capture shows an IPv4 packet with the Identification field set to 0x1A2B, the Flags field set to 0x2 (Don't Fragment), and the Fragment Offset set to 0. The packet's total length is 1500 bytes, and the MTU of the outgoing interface is 1500. What will happen when this packet is forwarded to a network with an MTU of 1400?

    Select an answer first
  2. 32foundation · easy

    Which TCP header field is used to control the amount of data a sender can transmit before waiting for an acknowledgment?

    Select an answer first
  3. 33expert · hard

    A security analyst is examining a TCP session and sees a packet with the SYN and FIN flags set, along with an acknowledgment number that does not correspond to any prior sequence number. Which of the following is the most likely explanation?

    Select an answer first
  4. 34foundation · easy

    What is the purpose of the Address Resolution Protocol (ARP)?

    Select an answer first
  5. 35foundation · easy

    What happens when an IPv4 packet exceeds the MTU of a network link?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.