
GIAC Certified Intrusion Analyst
Domain 1Objective 1
Concepts of TCP/IP and the Link Layer GCIA Practice Questions (Page 8)
Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)
42questions here
9free pages
12concepts
Questions 36–40
- 36
A junior analyst is examining a frame and sees that the destination MAC address is 01:00:5e:00:00:01. Which of the following best describes this address?
Select an answer first - 37
What is the correct order of decapsulation when a frame is received by a host?
Select an answer first - 38
An analyst sees a frame with a destination MAC address of 01:00:5e:00:00:01. The frame's EtherType is 0x0800, and the IP destination is 224.0.0.1. What is the most accurate description of this frame?
Select an answer first - 39
A server hosts multiple services: SSH on port 22, HTTP on port 80, and HTTPS on port 443. A packet arrives at the server's IP address with a destination port of 443. How does the operating system determine which application should receive the data?
Select an answer first - 40
What is the primary purpose of port numbers in the transport layer?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.