GIAC Network Forensic Analyst
Domain 1Objective 1
Common Network Protocols GNFA Practice Questions (Page 6)
Part of the Network Fundamentals and Architecture domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 9–16 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)
56questions here
12free pages
13concepts
Questions 26–30
- 26
A network analyst is examining a packet capture and sees a UDP packet with a destination port of 53. Which application-layer protocol is being used?
Select an answer first - 27
A network analyst is investigating a rogue DHCP server on a segment. The analyst captures DHCP traffic and observes a client sending a DHCPDISCOVER broadcast. The client then receives two DHCPOFFER messages from different servers. The client sends a DHCPREQUEST for the offer from the legitimate server. Which subsequent packet would confirm the client has accepted the legitimate server's offer?
Select an answer first - 28
Which DNS record type is used to map a domain name to an IPv6 address?
Select an answer first - 29
In FTP, what is the purpose of the control connection?
Select an answer first - 30
Which ICMP message type is used by the `ping` utility to test connectivity to a remote host?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GNFA” is a trademark of its owner, used for identification only.