Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
GIAC (SANS) logo

GIAC Certified Intrusion Analyst

Domain 1Objective 1

Concepts of TCP/IP and the Link Layer GCIA Practice Questions (Page 8)

Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here
9free pages
12concepts

Questions 36–40

  1. 36application · medium

    A junior analyst is examining a frame and sees that the destination MAC address is 01:00:5e:00:00:01. Which of the following best describes this address?

    Select an answer first
  2. 37foundation · easy

    What is the correct order of decapsulation when a frame is received by a host?

    Select an answer first
  3. 38application · medium

    An analyst sees a frame with a destination MAC address of 01:00:5e:00:00:01. The frame's EtherType is 0x0800, and the IP destination is 224.0.0.1. What is the most accurate description of this frame?

    Select an answer first
  4. 39application · medium

    A server hosts multiple services: SSH on port 22, HTTP on port 80, and HTTPS on port 443. A packet arrives at the server's IP address with a destination port of 443. How does the operating system determine which application should receive the data?

    Select an answer first
  5. 40foundation · easy

    What is the primary purpose of port numbers in the transport layer?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.