SCP Exam SC0-451 Topic 2 Question 76 Discussion

Actual exam question for SCP's SC0-451 exam

Question #: 76
Topic #: 2

You are configuring your new IDS machine, where you have recently installed Snort. While you are working with this machine, you wish to create some basic rules to test the ability to log traffic as you desire. Which of the following Snort rules will log any tcp traffic from any IP address to any port between 1 and 1024 on any host in the 10.0.10.0/24 network?

Alog tcp 0.0.0.0/24 -> 10.0.10.0/24 1<>1024

Blog tcp any any -> 10.0.10.0/24 1<>1024

Clog tcp any any -> 10.0.10.0/24 1:1024

Dlog tcp 0.0.0.0/24 -> 10.0.10.0/24 1:1024

Elog udp any any -> 10.0.10.0/24 1:1024

Show Suggested Answer

Suggested Answer: A

by Vi at Oct 22, 2023, 01:08 PM

Limited Time Offer

25%

Off

Get Premium SC0-451 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!