A company is migrating to IPv6 but has a large number of legacy IPv4-only devices that cannot be upgraded. The company wants to provide these devices with access to IPv6-only resources on the internet. The network team is considering NAT64 and 6to4 tunneling. Which factor is most important in deciding between these two mechanisms?

NAT64 allows IPv4-only devices to communicate with IPv6-only servers, while 6to4 only provides IPv6 connectivity over IPv4 networks.

NAT64 is easier to deploy than 6to4 because it does not require any changes to the IPv4-only devices.

6to4 is more secure than NAT64 because it does not require a translation device.

NAT64 requires a stateful translation device, while 6to4 is stateless and does not require any translation.

A security analyst is investigating a potential IPv6 attack. The analyst notices that a host is sending packets with a large number of extension headers, including multiple Hop-by-Hop Options headers. The analyst suspects that this is an attempt to evade security devices. Which IPv6 security concern is being exploited?

Extension header abuse, where an attacker uses many extension headers to bypass security devices that do not inspect them.

NDP spoofing, where an attacker sends false Neighbor Advertisements to redirect traffic.

Privacy extension misuse, where an attacker uses temporary addresses to hide their identity.

SLAAC attack, where an attacker sends malicious Router Advertisements to configure hosts with rogue addresses.

GIAC Certified Intrusion Analyst

Domain 1Objective 3

IPv6 GCIA Practice Questions (Page 7)

Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

Questions 31–35

31application · easy
A network administrator is reviewing the IPv6 address assigned to a server: 2001:db8:abcd:0012::1/64. The administrator needs to identify the subnet portion of the address. Which part of the address represents the subnet ID?
Select an answer first
32application · easy
A network engineer is explaining the IPv6 header to a junior analyst. Which field is present in the IPv6 base header but not in the IPv4 header?
Select an answer first
33expert · hard
A company is migrating to IPv6 but has a large number of legacy IPv4-only devices that cannot be upgraded. The company wants to provide these devices with access to IPv6-only resources on the internet. The network team is considering NAT64 and 6to4 tunneling. Which factor is most important in deciding between these two mechanisms?
Select an answer first
34application · medium
A security analyst is investigating a potential IPv6 attack. The analyst notices that a host is sending packets with a large number of extension headers, including multiple Hop-by-Hop Options headers. The analyst suspects that this is an attempt to evade security devices. Which IPv6 security concern is being exploited?
Select an answer first
35foundation · easy
What is the size of the fixed IPv6 base header?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.

IPv6 GCIA Practice Questions (Page 7)

Questions 31–35

A network administrator is reviewing the IPv6 address assigned to a server: 2001:db8:abcd:0012::1/64. The administrator needs to identify the subnet portion of the address. Which part of the address represents the subnet ID?

A network engineer is explaining the IPv6 header to a junior analyst. Which field is present in the IPv6 base header but not in the IPv4 header?

What is the size of the fixed IPv6 base header?

Keep studying — Network Fundamentals