nerdexam
Check_Point

156-115.77 · Question #177

You would like to import SNORT rules but to comply with corporate policy you need to test the conversion prior to import. How can you do this?

The correct answer is B. SnortConvertor update -f <inputfile> --dry-run. See the full explanation below for the reasoning.

Question

You would like to import SNORT rules but to comply with corporate policy you need to test the conversion prior to import. How can you do this?

Options

  • AYou must manually review each signature.
  • BSnortConvertor update -f <inputfile> --dry-run
  • CCheck Point does not support third party signatures.
  • DUnder the IPS tree Protections > By Protocol > IPS Software Blade > Application Intelligence >

How the community answered

(20 responses)
  • A
    15% (3)
  • B
    75% (15)
  • C
    5% (1)
  • D
    5% (1)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 156-115.77 Practice