SCP Exam SC0-451 Topic 5 Question 55 Discussion

Actual exam question for SCP's SC0-451 exam

Question #: 55
Topic #: 5

You are configuring your new IDS machine, and are creating new rules. You enter the following rule: Alert tcp any any -> 10.0.10.0/24 any (msg: "SYN-FIN scan detected"; flags:SF;) What is the effect of this rule?

AThis is an alert rule, designed to notify you of SYN-FIN scans of the network in one direction.

BThis is an alert rule, designed to notify you of SYN-FIN scans of the network in either direction.

CThis is a logging rule, designed to capture SYN-FIN scans.

DThis is a logging rule, designed to notify you of SYN-FIN scans.

EThis is an alert rule, designed to notify you of SYN-FIN scans originating from the 10.0.10.0/24 network.

Show Suggested Answer

Suggested Answer: A

by Marvel at Jul 21, 2022, 11:53 PM

Limited Time Offer

25%

Off

Get Premium SC0-451 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!