IPv6 GCIA Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A security analyst is examining a packet capture of IPv6 traffic that is being dropped by the company's firewall. The packet has a Destination Options header followed by a Fragment header. The firewall is configured to allow IPv6 traffic, but it is dropping this packet. What is the most likely reason the firewall is dropping the packet?

   • AThe packet is malformed because the Fragment header must come before the Destination Options header.
   • BThe firewall is configured to drop packets with extension headers to prevent evasion.
   • CThe packet is too large because the extension headers increase the size beyond the MTU.
   • DThe firewall does not support the Destination Options header.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is planning to deploy IPv6 in a phased approach. They have a large installed base of IPv4-only applications and cannot upgrade them all at once. They want to provide IPv6 connectivity to users while maintaining compatibility with IPv4-only servers. Which strategy would be the most practical and least complex to implement?

   • AUse Teredo for all IPv6 traffic.
   • BDeploy dual-stack on all routers and servers, and use DHCPv6 for address assignment.
   • CImplement NAT64 and DNS64 to allow IPv6-only clients to access IPv4-only servers.
   • DUse 6to4 tunneling for all IPv6 traffic.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which IPv6 Neighbor Discovery message is used by a host to resolve a neighbor's link-layer address?

   • ARouter Advertisement
   • BNeighbor Advertisement
   • CRouter Solicitation
   • DNeighbor Solicitation
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A network engineer is troubleshooting a connectivity issue between two IPv6 hosts. The packet capture shows that the source host is sending packets with a Routing header, but the destination host is dropping them. The engineer suspects that the Routing header is being used for a malicious purpose. Which type of attack is this?

   • AA reflection attack using the Routing header to bounce traffic off a third party.
   • BA Neighbor Discovery attack using Neighbor Advertisements.
   • CA multicast attack using multicast addresses.
   • DA fragmentation attack using the Fragment header.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the purpose of the double colon (::) in IPv6 address notation?

   • AIt marks the address as a multicast address.
   • BIt separates the network prefix from the interface identifier.
   • CIt indicates that the address is a link-local address.
   • DIt indicates that one or more groups of hexadecimal digits are all zeros and can be omitted.
   Reveal Solution Discussion Select an answer first