Which of the following identifies the three modes in which Snort can be configured to run?

The official Snort documentation defines three distinct operational modes. Sniffer mode reads and displays packets from the network in real time. Packet Logger mode writes those packets to disk for later analysis. Network Intrusion Detection System mode applies a rule set to captured traffic and generates alerts when signatures match, making it the most capable mode. These three modes are fundamental to Snort's architecture.

Snort does not include a Host Intrusion Detection System mode; HIDS is a separate category of tool that monitors host-level activity such as file system changes, which is outside Snort's network-focused scope.

Snort does not operate as a Host Intrusion Prevention System or a Network Intrusion Prevention System in its standard configuration; prevention capabilities require additional inline deployment configurations beyond the three core modes.

Host Intrusion Prevention System is not one of the three modes defined for Snort; this option incorrectly replaces the Network Intrusion Detection System mode with a host-based prevention mode.