You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration? alert tcp any any -> 192.168.100.0/

The correct answer is A. An Intrusion Detection System. Snort is an open source network intrusion detection system (NIDS) for networks . Snort rule example: This example is a rule with a generator id of 1000001. alert tcp any any -> any 80 (content:"BOB"; gid:1000001; sid:1; rev:1;)

Evading IDS, Firewalls, and Honeypots

Question

You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration? alert tcp any any -> 192.168.100.0/24 21 (msg: "FTP on the network!";)

Options

AAn Intrusion Detection System
BA firewall IPTable
CA Router IPTable
DFTP Server rule

How the community answered

(19 responses)

A
84% (16)
C
11% (2)
D
5% (1)

Explanation

Snort is an open source network intrusion detection system (NIDS) for networks . Snort rule example: This example is a rule with a generator id of 1000001. alert tcp any any -> any 80 (content:"BOB"; gid:1000001; sid:1; rev:1;)

Topics

#IDS rules#Snort#rule syntax#intrusion detection

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice