Eccouncil Exam 312-50 Topic 7 Question 23 Discussion

Actual exam question for Eccouncil's 312-50 exam

Question #: 23
Topic #: 7

Study the snort rule given below and interpret the rule. alert tcp any any --> 192.168.1.0/24 111

(content:"|00 01 86 a5|"; msG. "mountd access";)

AAn alert is generated when a TCP packet is generated from any IP on the 192.168.1.0 subnet and destined to any IP on port 111

BAn alert is generated when any packet other than a TCP packet is seen on the network and destined for the 192.168.1.0 subnet

CAn alert is generated when a TCP packet is originated from port 111 of any IP address to the 192.168.1.0 subnet

DAn alert is generated when a TCP packet originating from any IP address is seen on the network and destined for any IP address on the 192.168.1.0 subnet on port 111

Show Suggested Answer

Suggested Answer: D

by Jutta at May 08, 2022, 08:30 PM

Limited Time Offer

25%

Off

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!