LPI
303-200 · Question #38
Which of the following methods can be used to deactivate a rule in Snort? (Choose TWO correct answers.)
The correct answer is B. By placing a pass rule in local.rules and restarting Snort. C. By deleting the rule and waiting for Snort to reload its rules files automatically. See the full explanation below for the reasoning.
Question
Which of the following methods can be used to deactivate a rule in Snort? (Choose TWO correct answers.)
Options
- ABy placing a # in front of the rule and restarting Snort
- BBy placing a pass rule in local.rules and restarting Snort.
- CBy deleting the rule and waiting for Snort to reload its rules files automatically.
- DBy adding a pass rule to /etc/snort/rules.deactivated and waiting for Snort to reload its rules files
How the community answered
(32 responses)- A19% (6)
- B72% (23)
- D9% (3)
Community Discussion
No community discussion yet for this question.