GIAC GCIA Exam Syllabus
Start Free GCIA Exam Practice After Reviewing the Topics
Before starting your GCIA exam preparation, it is recommended to review the complete GIAC Certified Intrusion Analyst v4 exam syllabus and carefully go through the exam objectives listed below. Once you understand the exam structure and objectives, you should practice using our free GCIA questions. We also provide premium GCIA practice test, fully updated according to the latest exam objectives, to help you accurately assess your preparedness for the actual exam.
GIAC GCIA Exam Objectives
| Section 1: Advanced IDS Concepts | |
|
Weight: - |
The candidate will demonstrate an understanding of IDS tuning methods and correlation issues.
|
| Section 2: Application Protocols | |
|
Weight: - |
The candidate will demonstrate knowledge and skill relating to application layer protocol dissection and analysis.
|
| Section 3: Concepts of TCP/IP and the Link Layer | |
|
Weight: - |
The candidate will demonstrate understanding of the TCP/IP communications model and link layer operations.
|
| Section 4: Fragmentation | |
|
Weight: - |
The candidate will demonstrate understanding of how fragmentation works, and how to identify fragmentation and fragmentation-based attacks in packet captures.
|
| Section 5: IDS Fundamentals and Network Architecture | |
|
Weight: - |
The candidate will demonstrate knowledge of fundamental IDS concepts, such as network architecture options and benefits/weaknesses of common IDS systems.
|
| Section 6: Intrusion Detection System Rules | |
|
Weight: - |
The candidate will create effective IDS rules to detect varied types of malicious activity.
|
| Section 7: IP Headers | |
|
Weight: - |
The candidate will demonstrate the ability to dissect IP packet headers and analyze them for normal and anomalous values that may point to security issues.
|
| Section 8: IPv6 | |
|
Weight: - |
The candidate will demonstrate knowledge of IPv6 and how it differs from IPv4.
|
| Section 9: Network Forensics and Traffic Analysis | |
|
Weight: - |
The candidate will demonstrate competence in analyzing data from multiple sources (e.g. full packet capture, netflow, log files) to identify normal and malicious behaviors.
|
| Info | |