You are analyzing a wireless capture to determine whether a specific client device was present at a certain time. The capture contains only data frames, not management frames. Which field would be most useful to confirm the client's presence?

The sequence number in the data frame header.

The frame check sequence (FCS) value.

The source MAC address in the data frame header.

The BSSID in the data frame header.

GIAC Network Forensic Analyst

Domain 4Objective 2

Wireless Network Analysis GNFA Practice Questions (Page 8)

Part of the Advanced Analysis Techniques domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 8–13 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

9concepts

Questions 36–36

36application · medium
You are analyzing a wireless capture to determine whether a specific client device was present at a certain time. The capture contains only data frames, not management frames. Which field would be most useful to confirm the client's presence?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GNFA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GNFA” is a trademark of its owner, used for identification only.

Wireless Network Analysis GNFA Practice Questions (Page 8)

Questions 36–36

You are analyzing a wireless capture to determine whether a specific client device was present at a certain time. The capture contains only data frames, not management frames. Which field would be most useful to confirm the client's presence?

Keep studying — Advanced Analysis Techniques