Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
GIAC (SANS) logo

GIAC Certified Intrusion Analyst

Domain 1Objective 4

TCP GCIA Practice Questions (Page 9)

Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here
10free pages
12concepts

Questions 41–45

  1. 41expert · hard

    A network administrator is tuning a TCP connection that is transferring a large file. The connection is in congestion avoidance, and the congestion window is 64 KB. The round-trip time is 50 ms. The administrator wants to maximize throughput without causing congestion. What is the maximum throughput the connection can achieve, assuming no packet loss?

    Select an answer first
  2. 42application · medium

    A software developer is designing a real-time voice application that can tolerate occasional packet loss but requires low latency. Which transport protocol should the application use, and why?

    Select an answer first
  3. 43application · medium

    A TCP sender transmits segments with sequence numbers 1000, 1400, and 1800. The receiver sends an ACK with acknowledgment number 1400. What does this ACK indicate?

    Select an answer first
  4. 44expert · hard

    A TCP connection is in the ESTABLISHED state. The application on the server calls close(), and the server sends a FIN. The client receives the FIN and sends an ACK. The client application then also calls close(), sending its own FIN. The server receives the client's FIN and sends an ACK. Which side enters TIME_WAIT, and why?

    Select an answer first
  5. 45expert · hard

    A security analyst is examining a TCP handshake and notices that the client's ISN is 0. The server's ISN is 1000. The analyst suspects that the client is using a predictable ISN generation algorithm. Why is a predictable ISN a security concern?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.