GIAC Exam GSEC Topic 1 Question 3 Discussion

Internet Group Management Protocol (IGMP) is a communication protocol that multicasts messages and information among all member devices in an IP multicast group. However, multicast traffic is sent to a single MAC address but is processed by multiple hosts. It can be effectively

used for gaming and showing online videos. IGMP is vulnerable to network attacks.

Answer option D is incorrect. Internet Control Message Protocol (ICMP) is an integral part of IP. It is used to report an error in datagram

processing. The Internet Protocol (IP) is used for host-to-host datagram service in a network. The network is configured with connecting

devices called gateways. When an error occurs in datagram processing, gateways or destination hosts report the error to the source hosts

through the ICMP protocol. The ICMP messages are sent in various situations, such as when a datagram cannot reach its destination, when

the gateway cannot direct the host to send traffic on a shorter route, when the gateway does not have the buffering capacity, etc.

Answer option C is incorrect. Address Resolution Protocol (ARP) is a network maintenance protocol of the TCP/IP protocol suite. It is

responsible for the resolution of IP addresses to media access control (MAC) addresses of a network interface card (NIC). The ARP cache is

used to maintain a correlation between a MAC address and its corresponding IP address. ARP provides the protocol rules for making this

correlation and providing address conversion in both directions. ARP is limited to physical network systems that support broadcast packets.

Answer option B is incorrect. Transmission Control Protocol (TCP) is a reliable, connection-oriented protocol operating at the transport layer of

the OSI model. It provides a reliable packet delivery service encapsulated within the Internet Protocol (IP). TCP guarantees the delivery of

packets, ensures proper sequencing of data, and provides a checksum feature that validates both the packet header and its data for

accuracy. If the network corrupts or loses a TCP packet during transmission, TCP is responsible for retransmitting the faulty packet. It can

transmit large amounts of data. Application-layer protocols, such as HTTP and FTP, utilize the services of TCP to transfer files between clients and servers.