GCIA: GIAC Certified Intrusion AnalystDemo

Question

Which of the following information must fragments contain so that the destination host can reassemble them into their original, unfragmented state?

Each correct answer represents a complete solution. Choose all that apply.

Choose five

A MF flag
B Offset field
C MAC address
D Length of the data
E IP address
F IP identification number

Explanation

IPv4 reassembly groups fragments by their IP identification and source/destination IP addresses, places each fragment according to its fragment offset and data length, and uses the More Fragments (MF) flag to identify the last fragment. MAC addresses are link-layer addresses and are not used for IP fragment reassembly.

Learn more

RFC 791: Internet Protocol

GCIA: GIAC Certified Intrusion AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ376

Community Discussion