200-201 Question 284
Select 2A security analyst is investigating suspicious activity on a company's network that uses both IPv4 and IPv6. During the investigation, they discover an IPv6 address formatted as '2001:0db8:85a3:0000:0000:8a2e:0370:7334'. Which of the following statements are true about this IPv6 address?
- A
The address is in full notation and can be abbreviated by removing leading zeros and consecutive groups of zeros.
- B
The address belongs to the multicast address range of IPv6.
- C
It is a globally routable unicast address assigned by an ISP.
- D
The address is part of the reserved documentation range and is not routable on the internet.
- E
The address is part of the link-local address space used for communication within a single link.
Show answer and explanation
Correct answers: A, D
Explanation
The given IPv6 address '2001:0db8:85a3:0000:0000:8a2e:0370:7334' is part of the reserved documentation range ('2001:db8::/32'), which is not routable on the internet. It is presented in full notation and can be abbreviated for simplicity. Understanding IPv6 address formats and ranges is critical for cybersecurity operations to correctly analyze and respond to network activities.
- A. Correct.
Correct: The address is in full notation, and leading zeros in each segment can be removed. Consecutive zero blocks can also be replaced with '::' once.
- B. Incorrect.
Incorrect: The address does not belong to the multicast range, which typically starts with 'FF00::/8'.
- C. Incorrect.
Incorrect: While the address resembles a globally routable unicast address, it is actually part of the reserved documentation range ('2001:db8::/32') and not routable.
- D. Correct.
Correct: '2001:db8::/32' is a reserved IPv6 range used for documentation and examples, making it unroutable on the internet.
- E. Incorrect.
Incorrect: Link-local addresses are within the 'FE80::/10' range and are used for local communication within a single link.