Which of the following describes the best custom signature for detecting the use of the word "Fortinet" in chat applications?

Question

Exhibits

Options

• AThe sample packet trace illustrated in the exhibit provides details on the packet that requires detection.
• BF-SBID( --protocol tcp; --flow from_client; --pattern "fortinet"; --no_case; )
• CF-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; -- within 20;
• DF-SBID( --protocol tcp; --flow from_client; --pattern "X-MMS-IM-Format"; --pattern "fortinet"; -- within 20; )

• A
  79% (27)
• B
  6% (2)
• C
  3% (1)
• D
  12% (4)

No community discussion yet for this question.