nerdexam
GIAC

GSEC · Question #383

You are examining an IP packet with a header of 40 bytes in length and the value at byte 0 of the packet header is 6. Which of the following describes this packet?

The correct answer is C. This is an IPv6 packet; the protocol encapsulated in the payload is unspecified. A 40-byte header with a version field value of 6 identifies this as an IPv6 packet, and without knowing the Next Header field value, the encapsulated protocol is unspecified.

Networking and Core Concepts

Question

You are examining an IP packet with a header of 40 bytes in length and the value at byte 0 of the packet header is 6. Which of the following describes this packet?

Options

  • AThis is an IPv4 packet; the protocol encapsulated in the payload is unspecified.
  • BThis is an IPv4 packet with a TCP payload.
  • CThis is an IPv6 packet; the protocol encapsulated in the payload is unspecified.
  • DThis is an IPv6 packet with a TCP payload.

How the community answered

(59 responses)
  • A
    10% (6)
  • B
    2% (1)
  • C
    83% (49)
  • D
    5% (3)

Why each option

A 40-byte header with a version field value of 6 identifies this as an IPv6 packet, and without knowing the Next Header field value, the encapsulated protocol is unspecified.

AThis is an IPv4 packet; the protocol encapsulated in the payload is unspecified.

A 40-byte header with a version nibble of 6 does not match IPv4, which uses version 4 in the upper nibble of byte 0 and has a minimum header size of 20 bytes.

BThis is an IPv4 packet with a TCP payload.

The version nibble value of 6 identifies IPv6, not IPv4, so this cannot be an IPv4 packet with any payload.

CThis is an IPv6 packet; the protocol encapsulated in the payload is unspecified.Correct

The IPv6 fixed header is exactly 40 bytes, matching the described header length. The version field occupies the upper 4 bits of byte 0, and a value of 6 identifies this as an IPv6 packet rather than IPv4 (which uses version 4). The encapsulated payload protocol is determined by the Next Header field at byte 6, which is not provided in this scenario, so the payload protocol remains unspecified.

DThis is an IPv6 packet with a TCP payload.

While the packet is correctly IPv6, the payload cannot be identified as TCP without knowing the Next Header field value, which is not given in the question.

Concept tested: IPv6 fixed header structure and version identification

Source: https://www.rfc-editor.org/rfc/rfc8200

Topics

#IPv6#packet header analysis#IP version field#protocol identification

Community Discussion

No community discussion yet for this question.

Full GSEC Practice