CompTIA
LX0-102 · Question #211
Which of the following methods can be used to deactivate a rule in Snort? (Select TWO correct answers)
The correct answer is A. Place a # in front of the rule and restart snort. B. Write a pass rule in local.rules and restart snort with the o option. See the full explanation below for the reasoning.
Question
Which of the following methods can be used to deactivate a rule in Snort? (Select TWO correct answers)
Options
- APlace a # in front of the rule and restart snort.
- BWrite a pass rule in local.rules and restart snort with the o option.
- CDelete the rule and snort will automatically reread its rules files within five minutes.
- DAdd the rule to /etc/snort/rules.deactivated and it will take effect immediately.
How the community answered
(41 responses)- A71% (29)
- C10% (4)
- D20% (8)
Community Discussion
No community discussion yet for this question.