200-201 Question #538: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. A security engineer receives several alerts from the SNORT IPS/IDS reporting malicious traffic. What should the engineer understand by examining the SNORT logs?

Options

• AA remote threat performs an EternalBlue attack on a Windows system on several ports.
• BAn inside threat performs an EternalBlue attack on hosts 192.168.2.101 and 192.168.200.10 on
• CA remote threat performs an EternalBlue attack on several hosts and different ports.
• DAn inside threat performs an EternalBlue attack on a Windows system on port 445.