nerdexam
Fortinet

NSE6 · Question #117

You are creating a custom signature. Which has incorrect syntax?

The correct answer is A. F-SBID(--attack_id 1842,--name "Ping.Death";--protocol icmp; --data_size>32000;). See the full explanation below for the reasoning.

Question

You are creating a custom signature. Which has incorrect syntax?

Options

  • AF-SBID(--attack_id 1842,--name "Ping.Death";--protocol icmp; --data_size>32000;)
  • BF-SBID(--name "Block.SMTP.VRFY.CMD";--pattern "vrfy";--service SMTP; --no_case;--context
  • CF-SBID(--name "Ping.Death";--protocol icmp;--data_size>32000;)
  • DF-SBID(--name "Block".HTTP.POST"; --protocol tcp;--service HTTP;--flow from_client; --pattern

How the community answered

(50 responses)
  • A
    70% (35)
  • B
    16% (8)
  • C
    10% (5)
  • D
    4% (2)

Community Discussion

No community discussion yet for this question.

Full NSE6 Practice