A network administrator is troubleshooting IPv6 connectivity on a host. The host has a link-local address but cannot reach the internet. The administrator runs a packet capture and sees Router Solicitation messages being sent, but no Router Advertisement is received. What is the most likely cause of the issue?

The router is not configured to send Router Advertisements on that interface.

The host is using a multicast address for the Router Solicitation, which is blocked by the switch.

The router is using DHCPv6 to assign addresses, so it does not send Router Advertisements.

The host's firewall is blocking incoming Router Advertisements.

An organization requires that all employee workstations receive IPv6 addresses from a central DHCPv6 server to enforce security policies and track devices. The workstations also need to learn the DNS server addresses automatically. Which configuration should be used?

Use SLAAC with the O flag set in Router Advertisements.

Use static IPv6 addresses on each workstation.

Use DHCPv6 stateful mode with the M flag set in Router Advertisements.

Use DHCPv6 stateless mode with the M flag set.

GIAC Defensible Security Architect

Domain 3Objective 3

IPv6 GDSA Practice Questions (Page 9)

Part of the Network Services and Encryption domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–18 in this domain), expect 4–6 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 41–45

41application · medium
A network administrator is troubleshooting IPv6 connectivity on a host. The host has a link-local address but cannot reach the internet. The administrator runs a packet capture and sees Router Solicitation messages being sent, but no Router Advertisement is received. What is the most likely cause of the issue?
Select an answer first
42foundation · easy
Which function of the Neighbor Discovery Protocol (NDP) is used to determine the link-layer address (e.g., MAC address) of a neighbor on the same link?
Select an answer first
43application · medium
An organization requires that all employee workstations receive IPv6 addresses from a central DHCPv6 server to enforce security policies and track devices. The workstations also need to learn the DNS server addresses automatically. Which configuration should be used?
Select an answer first
44foundation · easy
Which DNS record type is used to map a hostname to an IPv6 address?
Select an answer first
45foundation · easy
Which IPv6 address scope is intended for communication within a single organization and is not routable on the public internet?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDSA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDSA” is a trademark of its owner, used for identification only.

IPv6 GDSA Practice Questions (Page 9)

Questions 41–45

Which function of the Neighbor Discovery Protocol (NDP) is used to determine the link-layer address (e.g., MAC address) of a neighbor on the same link?

An organization requires that all employee workstations receive IPv6 addresses from a central DHCPv6 server to enforce security policies and track devices. The workstations also need to learn the DNS server addresses automatically. Which configuration should be used?

Which DNS record type is used to map a hostname to an IPv6 address?

Which IPv6 address scope is intended for communication within a single organization and is not routable on the public internet?

Keep studying — Network Services and Encryption