A network administrator is troubleshooting an IPv6 issue where a host cannot obtain a global address via SLAAC. The host is receiving Router Advertisements, but the prefix information option does not have the Autonomous flag set. What is the likely result?

The host will use DHCPv6 to obtain an address instead.

The host will use the prefix to configure a link-local address.

The host will not autoconfigure a global address from the advertised prefix.

The host will ignore the Router Advertisement entirely.

Which NDP function is used by a host to verify that a tentative IPv6 address is not already in use on the local link?

Neighbor unreachability detection

A service provider is transitioning its core network to IPv6 but must continue to support IPv4-only customers for the foreseeable future. The provider wants to avoid the operational complexity of running dual-stack on every router and also wants to minimize the risk of tunneling attacks. Which transition strategy best balances these constraints?

Deploy 6rd (IPv6 Rapid Deployment) on the access network.

Implement manual GRE tunnels between customer sites and the core.

Use translation at the application layer with a proxy.

Use NAT64/DNS64 to allow IPv6-only customers to access IPv4-only services.

GIAC Defensible Security Architect

Domain 3Objective 3

IPv6 GDSA Practice Questions (Page 4)

Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 16–20

16expert · hard
A network administrator is troubleshooting an IPv6 issue where a host cannot obtain a global address via SLAAC. The host is receiving Router Advertisements, but the prefix information option does not have the Autonomous flag set. What is the likely result?
Select an answer first
17foundation · easy
Which NDP function is used by a host to verify that a tentative IPv6 address is not already in use on the local link?
Select an answer first
18expert · hard
A service provider is transitioning its core network to IPv6 but must continue to support IPv4-only customers for the foreseeable future. The provider wants to avoid the operational complexity of running dual-stack on every router and also wants to minimize the risk of tunneling attacks. Which transition strategy best balances these constraints?
Select an answer first
19foundation · easy
Which IPv6 transition mechanism can introduce security risks if not properly filtered, because it encapsulates IPv6 packets inside IPv4 packets?
Select an answer first
20foundation · easy
Which IPv6 address type is the equivalent of a broadcast address in IPv4?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

IPv6 GDSA Practice Questions (Page 4)

Questions 16–20

A network administrator is troubleshooting an IPv6 issue where a host cannot obtain a global address via SLAAC. The host is receiving Router Advertisements, but the prefix information option does not have the Autonomous flag set. What is the likely result?

Which NDP function is used by a host to verify that a tentative IPv6 address is not already in use on the local link?

Which IPv6 transition mechanism can introduce security risks if not properly filtered, because it encapsulates IPv6 packets inside IPv4 packets?

Which IPv6 address type is the equivalent of a broadcast address in IPv4?

Keep studying — Network Services and Encryption