SCP Exam SC0-402 Topic 2 Question 29 Discussion

Actual exam question for SCP's SC0-402 exam

Question #: 29
Topic #: 2

You are configuring your new IDS machine, and are creating new rules. You enter the following rule:

Alert tcp any any -> 100100/24 any (msg: ''NULL scan detected''; flags: 0;)

What is the effect of this rule?

AThis is a logging rule, designed to capture NULL scans originating from the 100100/24 network.

BThis is a logging rule, designed to capture NULL scans.

CThis is an alert rule, designed to notify you of NULL scans of the network in either direction.

DThis is an alert rule, designed to notify you of NULL scans of the network in one direction.

EThis is a logging rule, designed to notify you of NULL scans.

Show Suggested Answer

Suggested Answer: D

by Roslyn at May 07, 2022, 07:42 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!