SCP Exam SC0-402 Topic 2 Question 30 Discussion

Actual exam question for SCP's SC0-402 exam

Question #: 30
Topic #: 2

You are configuring your new IDS machine, and are creating new rules. You enter the following rule:

Alert tcp any any -> any 23 (msg: ''Telnet Connection Attempt'';)

What is the effect of this rule?

AThis is a logging rule, designed to capture any telnet attempts

BThis is an alert rule, designed to notify you of the use of telnet in either direction

CThis is an alert rule, designed to notify you of the use of telnet in one direction

DThis is a logging rule, designed to notify you of telnet connection attempts

EThis is an alert rule, designed to notify you of attempts to connect from any IP address on port 23 to any IP address and any port on
a remote host.

Show Suggested Answer

Suggested Answer: C

by Reita at May 06, 2022, 08:38 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!