A security analyst notices that a host on an IPv6 network is receiving unsolicited Neighbor Advertisement messages that claim to have a different link-layer address for the default router. The analyst suspects an on-path attack. Which Neighbor Discovery Protocol message type is being abused, and what is the likely attack?

Neighbor Advertisement (NA) messages are being spoofed to redirect traffic, indicating a potential Neighbor Advertisement spoofing attack.

Router Advertisement (RA) messages are being spoofed to advertise a malicious default route, indicating a potential Router Advertisement spoofing attack.

Router Solicitation (RS) messages are being spoofed to force the router to send RAs, indicating a potential Router Solicitation flooding attack.

Neighbor Solicitation (NS) messages are being spoofed to perform address resolution, indicating a potential Neighbor Solicitation spoofing attack.

A network analyst is comparing IPv4 and IPv6 headers to understand the differences for a security report. Which of the following is a key difference in the IPv6 header compared to IPv4?

The IPv6 header has a fixed length of 40 bytes.

The IPv6 header includes a checksum field.

The IPv6 header includes an IHL (Internet Header Length) field.

The IPv6 header includes a fragmentation field.

What is the purpose of IPv6 privacy extensions (RFC 4941)?

To prevent NDP spoofing attacks.

To hide the host's MAC address from the network.

To generate temporary random interface identifiers to prevent tracking of a host's activity.

To encrypt all IPv6 traffic automatically.

A network administrator is troubleshooting why a new IPv6 host is not able to communicate with other hosts on the same subnet. The host has been configured with a static IPv6 address, but it is not receiving Router Advertisements. Which Neighbor Discovery Protocol message should the host send to solicit Router Advertisements?

Router Advertisement (RA) to the all-nodes multicast address ff02::1

Neighbor Solicitation (NS) to the all-nodes multicast address ff02::1

Neighbor Advertisement (NA) to the all-routers multicast address ff02::2

Router Solicitation (RS) to the all-routers multicast address ff02::2

A network architect is designing an IPv6 network for a large enterprise. The architect wants to use SLAAC for address autoconfiguration but is concerned about privacy and the ability to track hosts. The architect also wants to ensure that hosts can obtain DNS server information. Which approach best addresses these concerns?

Use static IPv6 addresses and configure DNS manually on each host.

Use SLAAC without privacy extensions and rely on DHCPv6 for DNS information.

Use DHCPv6 for address assignment and DNS information, and disable SLAAC.

Use SLAAC with privacy extensions and configure the Router Advertisement to include DNS options (RFC 8106).

GIAC Certified Intrusion Analyst

Domain 1Objective 3

IPv6 GCIA Practice Questions (Page 6)

Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

Questions 26–30

26application · medium
A security analyst notices that a host on an IPv6 network is receiving unsolicited Neighbor Advertisement messages that claim to have a different link-layer address for the default router. The analyst suspects an on-path attack. Which Neighbor Discovery Protocol message type is being abused, and what is the likely attack?
Select an answer first
27application · easy
A network analyst is comparing IPv4 and IPv6 headers to understand the differences for a security report. Which of the following is a key difference in the IPv6 header compared to IPv4?
Select an answer first
28foundation · easy
What is the purpose of IPv6 privacy extensions (RFC 4941)?
Select an answer first
29application · medium
A network administrator is troubleshooting why a new IPv6 host is not able to communicate with other hosts on the same subnet. The host has been configured with a static IPv6 address, but it is not receiving Router Advertisements. Which Neighbor Discovery Protocol message should the host send to solicit Router Advertisements?
Select an answer first
30expert · hard
A network architect is designing an IPv6 network for a large enterprise. The architect wants to use SLAAC for address autoconfiguration but is concerned about privacy and the ability to track hosts. The architect also wants to ensure that hosts can obtain DNS server information. Which approach best addresses these concerns?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.

IPv6 GCIA Practice Questions (Page 6)

Questions 26–30

A network analyst is comparing IPv4 and IPv6 headers to understand the differences for a security report. Which of the following is a key difference in the IPv6 header compared to IPv4?

What is the purpose of IPv6 privacy extensions (RFC 4941)?

Keep studying — Network Fundamentals