EC-Council
312-50V7 · Question #503
Study the snort rule given below and interpret the rule. alert tcp any any --> 192.168.1.0/24 111 (content:"|00 01 86 a5|"; msG. "mountd access";)
The correct answer is D. An alert is generated when a TCP packet originating from any IP address is seen on the network and destined. See the full explanation below for the reasoning.
Question
Study the snort rule given below and interpret the rule. alert tcp any any --> 192.168.1.0/24 111 (content:"|00 01 86 a5|"; msG. "mountd access";)
Options
- AAn alert is generated when a TCP packet is generated from any IP on the 192.168.1.0 subnet and destined
- BAn alert is generated when any packet other than a TCP packet is seen on the network and destined for the
- CAn alert is generated when a TCP packet is originated from port 111 of any IP address to the 192.168.1.0
- DAn alert is generated when a TCP packet originating from any IP address is seen on the network and destined
How the community answered
(68 responses)- A13% (9)
- B6% (4)
- C4% (3)
- D76% (52)
Community Discussion
No community discussion yet for this question.