nerdexam
EC-Council

312-50V11 · Question #728

You have several plain-text firewall logs that you must review to evaluate network traffic. You know that in order to do fast, efficient searches of the logs you must use regular expressions. Which co

The correct answer is D. Grep. The question tests knowledge of command-line tools for searching text files using regular expressions. Grep is the standard Unix/Linux utility built for this purpose.

Evading IDS, Firewalls, and Honeypots

Question

You have several plain-text firewall logs that you must review to evaluate network traffic. You know that in order to do fast, efficient searches of the logs you must use regular expressions. Which command-line utility are you most likely to use?

Options

  • ARelational Database
  • BMS Excel
  • CNotepad
  • DGrep

How the community answered

(57 responses)
  • A
    4% (2)
  • B
    7% (4)
  • C
    2% (1)
  • D
    88% (50)

Why each option

The question tests knowledge of command-line tools for searching text files using regular expressions. Grep is the standard Unix/Linux utility built for this purpose.

ARelational Database

A relational database requires importing log data into a structured schema first and is not a command-line utility designed for regex-based text searches.

BMS Excel

MS Excel is a spreadsheet application that lacks native regular expression search support and is not a command-line utility.

CNotepad

Notepad is a basic GUI text editor with no regular expression search functionality and no command-line interface for log analysis.

DGrepCorrect

Grep (Global Regular Expression Print) is a command-line utility specifically designed to search plain-text files using regular expressions, making it ideal for fast and efficient log analysis. It supports complex pattern matching, can search across multiple files simultaneously, and outputs matching lines directly in the terminal. This makes it the standard tool for firewall log analysis in security operations.

Concept tested: Using grep for regex-based log file searching

Source: https://www.gnu.org/software/grep/manual/grep.html

Topics

#grep#regular expressions#firewall logs#log analysis

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice