Refer to the exhibit. What is the outcome of the command?

The correct answer is B. TCP rule that detects TCP packets with a SYN flag in the internal network. The command in the exhibit is a Snort rule that is configured to alert on TCP packets with the SYN flag set, where the source is not the home network (!$HOME_NET) and the destination is within the home network ($HOME_NET) on port 80. This rule is designed to detect potential…

Submitted by helene.fr· Mar 6, 2026Network Intrusion Analysis

Question

Options

ATCP rule that detects TCP packets with the ACK flag in an external FTP server
BTCP rule that detects TCP packets with a SYN flag in the internal network
CTCP rule that detects TCP packets with a ACK flag in the internal network
DTCP rule that detects TCP packets with the SYN flag in an external FTP server

How the community answered

(55 responses)

A
7% (4)
B
75% (41)
C
15% (8)
D
4% (2)

Explanation

The command in the exhibit is a Snort rule that is configured to alert on TCP packets with the SYN flag set, where the source is not the home network (!$HOME_NET) and the destination is within the home network ($HOME_NET) on port 80. This rule is designed to detect potential SYN flood attacks targeting the internal network's web server on port 80.

Topics

#IDS/IPS rules#TCP flags#network intrusion detection

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice