LPI
117-303 · Question #21
Which of the following methods can be used to deactivate a rule in Snort? (Select TWO correct answers)
The correct answer is A. Place a # in front of the rule and restart snort. B. Write a pass rule in local.rules and restart snort with the o option. See the full explanation below for the reasoning.
Question
Which of the following methods can be used to deactivate a rule in Snort? (Select TWO correct answers)
Options
- APlace a # in front of the rule and restart snort.
- BWrite a pass rule in local.rules and restart snort with the o option.
- CDelete the rule and snort will automatically reread its rules files within five minutes.
- DAdd the rule to /etc/snort/rules.deactivated and it will take effect immediately.
How the community answered
(25 responses)- A84% (21)
- C12% (3)
- D4% (1)
Community Discussion
No community discussion yet for this question.