During the TCP three-way handshake, what is the purpose of the SYN-ACK packet sent by the server?

It acknowledges the client's SYN and sends the server's own SYN to synchronize sequence numbers.

It terminates the connection by sending a FIN flag.

It only acknowledges the client's SYN without initiating any synchronization.

It resets the connection because the client's SYN was invalid.

Why does TCP enter the TIME_WAIT state after the active closer sends its final ACK?

To ensure the final ACK is received and to allow any delayed segments to expire before the connection is fully closed.

To prevent the client from initiating a new connection too quickly.

To allow the server to send additional data after the connection is closed.

To force the server to close its socket immediately.

GIAC Certified Intrusion Analyst

Domain 1Objective 4

TCP GCIA Practice Questions (Page 5)

Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

12concepts

Questions 21–25

21foundation · easy
Which field in the TCP header is used to indicate the number of data bytes the sender is willing to receive at one time?
Select an answer first
22application · medium
A network administrator notices that a TCP connection between two servers is transferring data slowly. The receiver's advertised window is 64 KB, but the round-trip time is 100 ms. The sender is using a window scale factor of 4. What is the maximum amount of data the sender can have in flight without waiting for an ACK?
Select an answer first
23foundation · easy
During the TCP three-way handshake, what is the purpose of the SYN-ACK packet sent by the server?
Select an answer first
24expert · hard
A network engineer is tuning a TCP connection over a 100 Mbps link with a round-trip time (RTT) of 50 ms. The receiver advertises a window of 64 KB, and window scaling is not enabled. What is the maximum theoretical throughput of this connection?
Select an answer first
25foundation · easy
Why does TCP enter the TIME_WAIT state after the active closer sends its final ACK?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.

TCP GCIA Practice Questions (Page 5)

Questions 21–25

Which field in the TCP header is used to indicate the number of data bytes the sender is willing to receive at one time?

During the TCP three-way handshake, what is the purpose of the SYN-ACK packet sent by the server?

A network engineer is tuning a TCP connection over a 100 Mbps link with a round-trip time (RTT) of 50 ms. The receiver advertises a window of 64 KB, and window scaling is not enabled. What is the maximum theoretical throughput of this connection?

Why does TCP enter the TIME_WAIT state after the active closer sends its final ACK?

Keep studying — Network Fundamentals