VIP Exclusive
GCIA GIAC Certified Intrusion Analyst VIP Practice Exam
GCIA — The GIAC Certified Intrusion Analyst (GCIA) is issued by GIAC (a division of the SANS Institute); the real exam consists of approximately 106 questions, allows 3 hours, requires a 67% passing score, and is an open-book proctored test covering network traffic analysis, packet analysis, TCP/IP protocols, intrusion detection system rule writing, and network forensics.
30
Questions
180m
Time Limit
67.00%
To Pass
Question 1 of 30👑 VIP
A network analyst captures the following packet header fields during an investigation: IP: src=192.168.1.50, dst=10.0.0.1, TTL=64, proto=6, total_len=52 TCP: sport=54321, dport=80, flags=0x002, seq=1000000, ack=0, win=65535 A second packet arrives moments later: IP: src=10.0.0.1, dst=192.168.1.50, TTL=128, proto=6 TCP: sport=80, dport=54321, flags=0x012, seq=2000000, ack=1000001 What phase of the TCP handshake do these two packets represent, and what would the analyst expect to see next to complete the connection?
Questions 2–30 and full explanations are VIP-exclusive.