A security analyst is investigating a potential IPv6 attack on a network. The analyst notices that a host is sending Neighbor Advertisements claiming to be the default gateway. The analyst suspects an NDP spoofing attack. Which mitigation technique would be most effective in preventing this type of attack?

Use Secure Neighbor Discovery (SEND) with Cryptographically Generated Addresses (CGA).

Implement RA Guard on the switch.

Configure the switch to use Dynamic ARP Inspection (DAI).

What is the primary function of Duplicate Address Detection (DAD) in IPv6?

To prevent duplicate IPv6 headers in a packet.

To ensure that a newly configured unicast address is not already in use on the link.

To detect duplicate packets arriving at a host.

To identify duplicate routers on the network.

GIAC Certified Intrusion Analyst

Domain 1Objective 3

IPv6 GCIA Practice Questions (Page 3)

Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

Questions 11–15

11application · easy
A network analyst is documenting IPv6 addresses and encounters the address 2001:db8::1. How many bits are represented by the '::' notation?
Select an answer first
12application · medium
A company has an IPv4-only network and wants to provide IPv6 connectivity to a remote branch office over the existing IPv4 internet connection. The branch office does not have a public IPv4 address. Which transition mechanism is most appropriate?
Select an answer first
13expert · hard
A security analyst is investigating a potential IPv6 attack on a network. The analyst notices that a host is sending Neighbor Advertisements claiming to be the default gateway. The analyst suspects an NDP spoofing attack. Which mitigation technique would be most effective in preventing this type of attack?
Select an answer first
14foundation · easy
What is the primary function of Duplicate Address Detection (DAD) in IPv6?
Select an answer first
15foundation · easy
Which IPv6 transition mechanism involves running both IPv4 and IPv6 protocol stacks simultaneously on network devices?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.

IPv6 GCIA Practice Questions (Page 3)

Questions 11–15

A network analyst is documenting IPv6 addresses and encounters the address 2001:db8::1. How many bits are represented by the '::' notation?

A company has an IPv4-only network and wants to provide IPv6 connectivity to a remote branch office over the existing IPv4 internet connection. The branch office does not have a public IPv4 address. Which transition mechanism is most appropriate?

What is the primary function of Duplicate Address Detection (DAD) in IPv6?

Which IPv6 transition mechanism involves running both IPv4 and IPv6 protocol stacks simultaneously on network devices?

Keep studying — Network Fundamentals