Fortinet
FCNSP · Question #99
Examine the following log message for IPS and identify the valid responses below. (Select all that apply.) 2012-07-01 09:54:28 oid=2 log_id=18433 type=ips subtype=anomaly pri=alert vd=root…
The correct answer is B. The target is 192.168.3.170. D. The attack was detected only. Fortinet FCNSP Exam
Security Fundamentals
Question
Examine the following log message for IPS and identify the valid responses below. (Select all that apply.) 2012-07-01 09:54:28 oid=2 log_id=18433 type=ips subtype=anomaly pri=alert vd=root severity="critical" src="192.168.3.168" dst="192.168.3.170" src_int="port2" serial=0 status="detected" proto=1 service="icmp" count=1 attack_name="icmp_flood" icmp_id="0xa8a4" icmp_type="0x08" icmp_code="0x00" attack_id=16777316 sensor="1"
Options
- AThe target is 192.168.3.168.
- BThe target is 192.168.3.170.
- CThe attack was detected and blocked.
- DThe attack was detected only.
- EThe attack was TCP based.
How the community answered
(16 responses)- A13% (2)
- B75% (12)
- C6% (1)
- E6% (1)
Explanation
Fortinet FCNSP Exam
Topics
#IPS#log analysis#ICMP flood#intrusion detection
Community Discussion
No community discussion yet for this question.