nerdexam
GIAC

GSEC · Question #327

The TTL can be found in which protocol header?

The correct answer is C. IP. The TTL field is defined exclusively within the IPv4 protocol header, not in transport-layer or ICMP headers.

Networking and Core Concepts

Question

The TTL can be found in which protocol header?

Options

  • AUDP
  • BTCP
  • CIP
  • DICMP

How the community answered

(55 responses)
  • A
    15% (8)
  • B
    4% (2)
  • C
    75% (41)
  • D
    7% (4)

Why each option

The TTL field is defined exclusively within the IPv4 protocol header, not in transport-layer or ICMP headers.

AUDP

UDP headers contain only source port, destination port, length, and checksum fields - there is no TTL field defined in the UDP header specification.

BTCP

TCP headers contain sequence numbers, acknowledgment numbers, control flags, window size, and checksum fields, but no TTL field.

CIPCorrect

TTL is a dedicated 8-bit field in the IPv4 header as defined in RFC 791, set by the source host and decremented by each forwarding router; in IPv6, this field is renamed 'Hop Limit' but serves the same purpose. Because TTL is a network-layer concept controlling packet lifetime across internetworks, it belongs in the IP header rather than any higher-layer or encapsulated protocol header.

DICMP

ICMP messages are encapsulated inside IP packets and rely on the outer IP header for TTL; the ICMP header itself does not include or define a TTL field.

Concept tested: IPv4 header structure and TTL field location

Source: https://datatracker.ietf.org/doc/html/rfc791

Topics

#TTL#IP header#protocol headers#TCP/IP

Community Discussion

No community discussion yet for this question.

Full GSEC Practice