You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration? alert tcp any any -> 192.168.100.0/

The correct answer is A. An Intrusion Detection System. Snort is an open source network intrusion detection system (NIDS) for networks . Snort rule example: This example is a rule with a generator id of 1000001. alert tcp any any -> any 80 (content:"BOB"; gid:1000001; sid:1; rev:1;)

Evading IDS, Firewalls, and Honeypots

Question

You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration? alert tcp any any -> 192.168.100.0/24 21 (msg: "FTP on the network!";)

Options

AAn Intrusion Detection System
BA firewall IPTable
CA Router IPTable
DFTP Server rule

How the community answered

(25 responses)

A
88% (22)
B
4% (1)
C
8% (2)

Explanation

Snort is an open source network intrusion detection system (NIDS) for networks . Snort rule example: This example is a rule with a generator id of 1000001. alert tcp any any -> any 80 (content:"BOB"; gid:1000001; sid:1; rev:1;)

Topics

#Snort rules#IDS configuration#intrusion detection#alert rules

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice