A security architect is reviewing the IPv6 deployment plan for a large enterprise. The plan includes enabling IPv6 on all internal networks and using tunneling for remote sites that do not have native IPv6. The architect is concerned about the security implications of tunneling and wants to minimize the risk of unauthorized tunnels. Which approach should the architect recommend?

Use IPsec to encrypt all tunneling traffic and enforce strict firewall rules to allow only approved tunnel endpoints.

Disable all tunneling and require native IPv6 connectivity at all remote sites.

Use NAT64 translation instead of tunneling to connect remote sites.

Use 6to4 tunneling without encryption because it is simpler and does not require additional configuration.

A network architect is designing an IPv6 addressing scheme for a service that must be highly available. The service will be hosted on multiple servers in different locations, and clients should automatically connect to the nearest server. The architect also wants to ensure that if one server fails, traffic is automatically redirected to another server. Which addressing approach should be used?

Assign unique unicast addresses to each server and use DNS round-robin.

Assign link-local addresses to each server and use a load balancer.

Assign the same anycast address to all servers and advertise it via routing protocols.

Assign multicast addresses to each server and use IGMP for failover.

GIAC Defensible Security Architect

Domain 3Objective 3

IPv6 GDSA Practice Questions (Page 5)

Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 21–25

21foundation · easy
Which IPv6 address scope is automatically configured on every interface and is only valid on the local link?
Select an answer first
22foundation · easy
Which IPv6 transition mechanism involves running both IPv4 and IPv6 protocol stacks on the same network device?
Select an answer first
23expert · hard
A security architect is reviewing the IPv6 deployment plan for a large enterprise. The plan includes enabling IPv6 on all internal networks and using tunneling for remote sites that do not have native IPv6. The architect is concerned about the security implications of tunneling and wants to minimize the risk of unauthorized tunnels. Which approach should the architect recommend?
Select an answer first
24foundation · easy
Which IPv6 transition mechanism is used to allow IPv6-only clients to access IPv4-only servers by translating the packet headers?
Select an answer first
25expert · hard
A network architect is designing an IPv6 addressing scheme for a service that must be highly available. The service will be hosted on multiple servers in different locations, and clients should automatically connect to the nearest server. The architect also wants to ensure that if one server fails, traffic is automatically redirected to another server. Which addressing approach should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

IPv6 GDSA Practice Questions (Page 5)

Questions 21–25

Which IPv6 address scope is automatically configured on every interface and is only valid on the local link?

Which IPv6 transition mechanism involves running both IPv4 and IPv6 protocol stacks on the same network device?

Which IPv6 transition mechanism is used to allow IPv6-only clients to access IPv4-only servers by translating the packet headers?

Keep studying — Network Services and Encryption