How does a TCP receiver indicate to the sender that it is willing to receive more data?

By setting the SYN flag in the next segment

By increasing the sequence number

By advertising a non-zero window size in the TCP header

A network analyst observes a TCP session where the receiver advertises a window size of 0 in an ACK. The sender stops transmitting data. What is the most likely reason for this behavior?

The receiver's receive buffer is full, and it is applying flow control to pause the sender.

The receiver has sent a duplicate ACK to request fast retransmission.

The sender has reached the maximum segment lifetime and is closing the connection.

The sender has detected network congestion and entered slow start.

What is the purpose of the PSH (push) flag in a TCP segment?

It indicates that the segment contains urgent data.

It requests retransmission of lost segments.

It synchronizes sequence numbers during connection setup.

It instructs the receiver to deliver the data to the application immediately without buffering.

In the TCP four-way termination handshake, what is the purpose of the first FIN packet sent by the side that initiates closure?

It immediately tears down the entire connection and discards all buffered data.

It forces the receiver to send all unacknowledged data immediately.

It indicates that the sender has no more data to transmit and requests to close its sending direction.

It resets the sequence numbers to zero for the next connection.

GIAC Certified Intrusion Analyst

Domain 1Objective 4

TCP GCIA Practice Questions (Page 10)

Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

12concepts

Questions 46–50

46foundation · easy
How does a TCP receiver indicate to the sender that it is willing to receive more data?
Select an answer first
47application · medium
A network analyst observes a TCP session where the receiver advertises a window size of 0 in an ACK. The sender stops transmitting data. What is the most likely reason for this behavior?
Select an answer first
48foundation · easy
What is the purpose of the PSH (push) flag in a TCP segment?
Select an answer first
49foundation · easy
In the TCP four-way termination handshake, what is the purpose of the first FIN packet sent by the side that initiates closure?
Select an answer first
50foundation · easy
In the TCP state machine, what state does a server enter after it sends a SYN-ACK in response to a client's SYN?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCIA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.