A network administrator is troubleshooting a problem where a host cannot reach a server on a different subnet. The administrator runs a traceroute and sees that the first hop responds, but the second hop times out. What does this indicate?

The first hop router is misconfigured.

The second hop router may be dropping ICMP packets or not generating Time Exceeded messages.

The destination server is down.

The UDP packets are being blocked by a firewall on the second hop.

A network analyst is investigating a report that a server is unreachable. The analyst runs a ping from a workstation and receives an ICMP Echo Reply. However, when trying to connect to a UDP-based application on the server, the connection fails. What is the most likely cause?

The server is up, but the UDP application is not listening on the expected port.

The server is down, and the Echo Reply was spoofed by an attacker.

The network is blocking all UDP traffic, but allowing ICMP.

The UDP checksum is incorrect, causing all packets to be dropped.

A network administrator is troubleshooting a connectivity issue from a workstation to a server on a different subnet. The workstation sends an ICMP echo request to the server's IP address, but receives an ICMP destination unreachable message with code 4 (fragmentation needed and DF set) from an intermediate router. What does this indicate?

The packet is too large to traverse a link without fragmentation, and the DF bit is set, so the router dropped it.

The destination server is unreachable because it is powered off or not responding.

The router has an ACL that is blocking ICMP echo requests from the workstation.

The echo request was successfully delivered, but the reply is being fragmented because the return path has a smaller MTU.

What is the purpose of an ICMP timestamp request and reply?

To obtain the current time from another host

To measure the round-trip time of a packet

To test whether a host is reachable

GIAC Certified Intrusion Analyst

Domain 1Objective 5

UDP and ICMP GCIA Practice Questions (Page 4)

Part of the Network Fundamentals domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~33–56 in this domain), expect 7–11 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

6concepts

Questions 16–20

16application · medium
A network administrator is troubleshooting a problem where a host cannot reach a server on a different subnet. The administrator runs a traceroute and sees that the first hop responds, but the second hop times out. What does this indicate?
Select an answer first
17application · medium
A network analyst is investigating a report that a server is unreachable. The analyst runs a ping from a workstation and receives an ICMP Echo Reply. However, when trying to connect to a UDP-based application on the server, the connection fails. What is the most likely cause?
Select an answer first
18foundation · easy
What is the size of the UDP header in bytes?
Select an answer first
19application · medium
A network administrator is troubleshooting a connectivity issue from a workstation to a server on a different subnet. The workstation sends an ICMP echo request to the server's IP address, but receives an ICMP destination unreachable message with code 4 (fragmentation needed and DF set) from an intermediate router. What does this indicate?
Select an answer first
20foundation · easy
What is the purpose of an ICMP timestamp request and reply?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.

UDP and ICMP GCIA Practice Questions (Page 4)

Questions 16–20

A network administrator is troubleshooting a problem where a host cannot reach a server on a different subnet. The administrator runs a traceroute and sees that the first hop responds, but the second hop times out. What does this indicate?

A network analyst is investigating a report that a server is unreachable. The analyst runs a ping from a workstation and receives an ICMP Echo Reply. However, when trying to connect to a UDP-based application on the server, the connection fails. What is the most likely cause?

What is the size of the UDP header in bytes?

What is the purpose of an ICMP timestamp request and reply?

Keep studying — Network Fundamentals