A security analyst is investigating a potential IPv6 attack. The analyst notices that a host is sending Neighbor Advertisements claiming to be the default gateway. The analyst also sees that the host is using a multicast address that is not standard. Which attack is the host likely performing?

Multicast listener discovery attack to join unauthorized groups.

Neighbor Discovery spoofing to redirect traffic to the attacker.

Router Advertisement flood to exhaust host resources.

Duplicate Address Detection attack to prevent address assignment.

A company is running a dual-stack network and is experiencing intermittent connectivity issues. The security team notices that some hosts are using IPv6 transition mechanisms that are not approved by policy. Which action should be taken to reduce the risk of unauthorized tunneling?

Block all IPv6 traffic that uses protocol 41 (6to4) and disable ISATAP on hosts.

Disable IPv6 entirely on all hosts to prevent tunneling.

Configure NAT64 to translate all IPv6 traffic to IPv4.

Allow all tunneling protocols to ensure connectivity.

A network architect is designing an IPv6 addressing plan for a global content delivery network. The service must provide the same anycast address to multiple servers in different geographic regions so that clients automatically connect to the nearest server. Which IPv6 address type should the architect assign to the servers?

A global unicast address that is assigned identically to multiple interfaces.

A link-local address that is identical on all servers.

A unique local address (ULA) with the same prefix on all servers.

A multicast address that all servers join.

A company is enabling IPv6 on its internal network. The security team wants to ensure that DNS queries for internal resources remain private and are not leaked to external DNS servers. The network uses Active Directory with integrated DNS. Which configuration should be implemented?

Enable DNSSEC on the internal DNS servers.

Use split-horizon DNS with internal zones only on internal DNS servers.

Use DHCPv6 to assign DNS servers to clients.

Configure DNS64 and NAT64 to translate DNS queries.

GIAC Defensible Security Architect

Domain 3Objective 3

IPv6 GDSA Practice Questions (Page 6)

Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 26–30

26expert · hard
A security analyst is investigating a potential IPv6 attack. The analyst notices that a host is sending Neighbor Advertisements claiming to be the default gateway. The analyst also sees that the host is using a multicast address that is not standard. Which attack is the host likely performing?
Select an answer first
27application · medium
A company is running a dual-stack network and is experiencing intermittent connectivity issues. The security team notices that some hosts are using IPv6 transition mechanisms that are not approved by policy. Which action should be taken to reduce the risk of unauthorized tunneling?
Select an answer first
28foundation · easy
Which IPv6 address configuration method is stateful and provides additional configuration parameters such as DNS server addresses?
Select an answer first
29application · medium
A network architect is designing an IPv6 addressing plan for a global content delivery network. The service must provide the same anycast address to multiple servers in different geographic regions so that clients automatically connect to the nearest server. Which IPv6 address type should the architect assign to the servers?
Select an answer first
30application · medium
A company is enabling IPv6 on its internal network. The security team wants to ensure that DNS queries for internal resources remain private and are not leaked to external DNS servers. The network uses Active Directory with integrated DNS. Which configuration should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

IPv6 GDSA Practice Questions (Page 6)

Questions 26–30

A security analyst is investigating a potential IPv6 attack. The analyst notices that a host is sending Neighbor Advertisements claiming to be the default gateway. The analyst also sees that the host is using a multicast address that is not standard. Which attack is the host likely performing?

A company is running a dual-stack network and is experiencing intermittent connectivity issues. The security team notices that some hosts are using IPv6 transition mechanisms that are not approved by policy. Which action should be taken to reduce the risk of unauthorized tunneling?

Which IPv6 address configuration method is stateful and provides additional configuration parameters such as DNS server addresses?

A company is enabling IPv6 on its internal network. The security team wants to ensure that DNS queries for internal resources remain private and are not leaked to external DNS servers. The network uses Active Directory with integrated DNS. Which configuration should be implemented?

Keep studying — Network Services and Encryption