Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by GIAC
Exam Format
Registration
Validity
GCIA Exam Topics and Domains
GCIA is organized into 5 weighted domains. Expect to work with ICMP, NetFlow, 802.11, 802.3, and more.
TCP/IP Fundamentals and Network Architecture
Concepts of TCP/IP and the Link Layer
Demonstrate understanding of the TCP/IP communications model and link layer operations
IDS Fundamentals and Network Architecture
Demonstrate knowledge of fundamental IDS concepts, such as network architecture options and benefits/weaknesses of common IDS systems
Packet Analysis and Protocol Dissection
IP Headers and Fragmentation
- Demonstrate the ability to dissect IP packet headers and analyze them for normal and anomalous values
- Demonstrate understanding of how fragmentation works and how to identify fragmentation-based attacks
- Demonstrate knowledge of IPv6 and how it differs from IPv4
Transport Layer Protocols
- Demonstrate understanding of the TCP protocol and the ability to discern between typical and anomalous behavior
- Demonstrate understanding of the UDP and ICMP protocols and the ability to discern between typical and anomalous behavior
Application Protocols
Demonstrate knowledge and skill relating to application layer protocol dissection and analysis
Traffic Analysis Tools and Techniques
Wireshark Fundamentals
Demonstrate ability to use Wireshark to analyze typical and malicious network traffic
Tcpdump and BPF Filters
Demonstrate ability to craft tcpdump filters that match on given criteria
Flow Analysis Tools
Demonstrate an understanding of SiLK and other tools to perform network traffic and flow analysis
Packet Engineering
Demonstrate knowledge relating to packet crafting and manipulation
Intrusion Detection Systems
Open-Source IDS: Snort and Zeek
Understand configuration and use of open-source IDS platforms Snort and Zeek
IDS Rules and Tuning
- Create effective IDS rules to detect varied types of malicious activity
- Demonstrate an understanding of IDS tuning methods and correlation issues
Network Forensics and Threat Hunting
Network Forensics and Traffic Analysis
Demonstrate competence in analyzing data from multiple sources to identify normal and malicious behaviors
How do I earn this certification?
Passing GCIA earns the GIAC Certified Intrusion Analyst certification. It sits in the Cyber Defense track.
- GMON - GIAC Continuous Monitoring
- GCDA - GIAC Certified Detection Analyst
- GNFA - GIAC Network Forensic Analyst
- GX-IA - GIAC Experienced Intrusion Analyst
- GSE - GIAC Security Expert
- GCIH - GIAC Certified Incident Handler Complementary incident response skills
- GCFA - GIAC Certified Forensic Analyst Advanced forensics capabilities
- GPEN - GIAC Penetration Tester Offensive perspective on network security
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for GCIA is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
- ACTIVE
- Last content update: 2023-01-21
- Zeek (formerly Bro) 6.0+ Updated scripting syntax and new protocol analyzers • Release date: 2024
- Wireshark 4.2+ New display filter syntax and enhanced protocol dissectors • Release date: 2024
- IPv6 N/A Increased focus on IPv6 security and transition mechanisms • Release date: Ongoing
Who should take this exam?
This exam is typically taken by Practitioners responsible for intrusion detection and System analysts.
- Understanding of TCP/IP networking
- Basic Linux command line experience
- Familiarity with network protocols
- Experience with network monitoring tools