Cisco 500-280 - Securing Cisco Networks with Open Source Snort Exam
Page: 3 / 12
Total 60 questions
Question #11 (Topic: )
Which engine or module presents alert and log data in the format that you specify?
A. tap
B. sniffing
C. detection
D. output
Answer: D
Question #12 (Topic: )
Other than intrusion sensing, which other function set can Snort perform?
A. packet sniffing and disassembly
B. packet logging and alerting
C. intrusion sensing and packet sniffing
D. packet sniffing and logging
Answer: D
Question #13 (Topic: )
Which output is in a lightweight, binary form?
A. unified2
B. PCAP
C. SNMP
D. CSV
Answer: A
Question #14 (Topic: )
What does packet sniffing do?
A. isolates datagrams into like groups
B. reads datagrams directly off the wire
C. transmits datagrams over a wireless network
D. rebuilds datagram streams
Answer: B
Question #15 (Topic: )
When building a platform for a Snort installation, which set of components is a major
security concern?
security concern?
A. IP address, mask, and gateway settings
B. host naming conventions
C. URL feed vendors
D. default accounts and settings
Answer: D
