An analyst is troubleshooting why a router discarded an IPv4 packet. The packet has an IHL of 5 and a header checksum that does not match the computed value. Which field change would cause the checksum to become invalid?

The payload data was modified in transit

The IP options were removed by a middlebox

The TTL field was decremented by the router without recomputing the checksum

The destination MAC address was changed at each hop

Which of the following is a valid IPv6 extension header and is typically placed immediately after the fixed IPv6 header?

Encapsulating Security Payload (ESP)

In an IPv4 fragment, what does the Fragment Offset field indicate?

The total length of the fragment

The time-to-live value of the fragment

The position of the fragment's data in the original datagram, measured in 8-byte units

The number of fragments in the original datagram

GIAC Certified Intrusion Analyst

Domain 1Objective 2

IP Headers GCIA Practice Questions (Page 6)

Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

11concepts

Questions 26–30

26application · medium
An analyst is troubleshooting why a router discarded an IPv4 packet. The packet has an IHL of 5 and a header checksum that does not match the computed value. Which field change would cause the checksum to become invalid?
Select an answer first
27foundation · easy
Which of the following is a valid IPv6 extension header and is typically placed immediately after the fixed IPv6 header?
Select an answer first
28application · medium
A packet capture shows an IPv4 header with the following values: Version=4, IHL=5, Total Length=120, Identification=0x1234, Flags=0x2 (Don't Fragment), Fragment Offset=0, TTL=64, Protocol=6, Header Checksum=0xABCD, Source=192.168.1.1, Destination=192.168.1.2. How many bytes of payload does this packet contain?
Select an answer first
29foundation · easy
In an IPv4 fragment, what does the Fragment Offset field indicate?
Select an answer first
30application · medium
A network administrator is configuring a firewall rule to allow traffic from a specific host. The host has an IPv6 address of 2001:db8::1. How many bits are used to represent the destination address field in the IPv6 header?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.

IP Headers GCIA Practice Questions (Page 6)

Questions 26–30

An analyst is troubleshooting why a router discarded an IPv4 packet. The packet has an IHL of 5 and a header checksum that does not match the computed value. Which field change would cause the checksum to become invalid?

Which of the following is a valid IPv6 extension header and is typically placed immediately after the fixed IPv6 header?

In an IPv4 fragment, what does the Fragment Offset field indicate?

A network administrator is configuring a firewall rule to allow traffic from a specific host. The host has an IPv6 address of 2001:db8::1. How many bits are used to represent the destination address field in the IPv6 header?

Keep studying — Network Fundamentals