Fortinet
FCNSP · Question #32
An administrator is examining the attack logs and notices the following entry: type=ips subtype=signature pri=alert vd=root serial=1995 attack_id=103022611 src=69.45.64.22 dst=192.168.1.100…
The correct answer is C. The attack was against a FortiGate unit at the 192.168.1.100 IP address. D. The attack was detected and passed by the FortiGate unit. See the full explanation below for the reasoning.
Question
An administrator is examining the attack logs and notices the following entry:
type=ips subtype=signature pri=alert vd=root serial=1995 attack_id=103022611 src=69.45.64.22 dst=192.168.1.100 src_port=80 dst_port=4887 src_int=wlan dst_int=internal status=detected proto=6 service=4887/tcp user=N/A group=N/A msg=web_client:
IE.IFRAME.BufferOverflow.B Based on the information displayed in this entry, which of the following statements are correct? (Select all that apply.)
Options
- AThis is an HTTP server attack.
- BThe attack was detected and blocked by the FortiGate unit.
- CThe attack was against a FortiGate unit at the 192.168.1.100 IP address.
- DThe attack was detected and passed by the FortiGate unit.
How the community answered
(29 responses)- A10% (3)
- B21% (6)
- C69% (20)
Community Discussion
No community discussion yet for this question.