FirstTry
GCIAGIAC Certified Intrusion Analyst (GCIA)

Practice Exam 1

5 of this form’s 106 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.

  1. Question 1 of 5

    IP Headers, Fragmentation, and IPv6

    A developer sizes a buffer to hold a full IPv6 address, knowing IPv4 uses 32 bits. How many bits wide is an IPv6 address?

  2. Question 2 of 5

    Intrusion Detection Systems

    An analyst's IDS flags an unauthenticated FTP session that issues commands allowed only after login. Which detection method is this?

  3. Question 3 of 5

    Concepts of TCP/IP and the Link Layer

    A firewall must forward a large datagram whose DF flag is set, but the next link's MTU is too small. What does setting the Don't Fragment flag signify?

  4. Question 4 of 5

    UDP, ICMP, and Application Protocols

    An analyst captures a UDP datagram carrying an all-zero Checksum field. What does that value indicate about the sender?

  5. Question 5 of 5

    Traffic Analysis Tools

    An analyst needs a Wireshark display filter that matches any IPv4 address inside the 10.20.0.0/16 range in one expression. Which notation supports this?

0 of 106 completed

0%

The other 101 questions are the rest of this form: same 240 minute clock, same 67 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 2 on GCIA.

What this exam covers

  • Concepts of TCP/IP and the Link Layer19 questions / 18% of the exam
  • IP Headers, Fragmentation, and IPv617 questions / 16% of the exam
  • UDP, ICMP, and Application Protocols16 questions / 15% of the exam
  • Traffic Analysis Tools21 questions / 20% of the exam
  • Intrusion Detection Systems20 questions / 19% of the exam
  • Network Forensics and Traffic Analysis13 questions / 12% of the exam

Checking what you already have access to.

Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.