EC-Council
312-50V7 · Question #503
312-50V7 Question #503: Real Exam Question with Answer & Explanation
Sign in or unlock 312-50V7 to reveal the answer and full explanation for question #503. The question stem and answer options stay visible for context.
Question
Study the snort rule given below and interpret the rule. alert tcp any any --> 192.168.1.0/24 111 (content:"|00 01 86 a5|"; msG. "mountd access";)
Options
- AAn alert is generated when a TCP packet is generated from any IP on the 192.168.1.0 subnet and destined
- BAn alert is generated when any packet other than a TCP packet is seen on the network and destined for the
- CAn alert is generated when a TCP packet is originated from port 111 of any IP address to the 192.168.1.0
- DAn alert is generated when a TCP packet originating from any IP address is seen on the network and destined
Unlock 312-50V7 to see the answer
You've previewed enough free 312-50V7 questions. Unlock 312-50V7 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.