An engineer wants to review the packet overviews of SNORT alerts. When printing the SNORT alerts, all the packet headers are included, and the file is too large to utilize. Which action is needed to correct this problem?
Suggested Answer: A
Get Premium 350-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
%2F20201231%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20201231T141156Z&X-Amz- Expires=172800&X-Amz-SignedHeaders=host&X-Amz- Signature=e122ab6eb1659e13b3bc6bb2451ce693c0298b76c1962c3743924bc5fd83d382
9 comments · newest first
GR
Graciela
12 months ago
I agree, D is the best way to go for manageable files!
DA
Daniel
12 months ago
Wait, why would you want to include all headers? Seems excessive.
RA
Rasheeda
1 year ago
Definitely not A, that won't help with the size.
KE
Kenneth
1 year ago
I think B could work too, but not sure.
CO
Corazon
1 year ago
Option D is the right choice!
JO
Jolene
1 year ago
This seems like a straightforward incident response question. I'd start by containing the damage and isolating the infected device to prevent the Trojan from spreading.
MA
Marylou
1 year ago
Okay, let me see here. I know worms can self-replicate, but I'm not sure if that's the major difference from Trojans. I'll have to think this through step-by-step.
AL
Alverta
1 year ago
I'll mark C and move on quickly. Don't want to overthink this and waste exam time.
NI
Nieves
1 year ago
I feel like Sony/SDH switching was mentioned in one of our group studies, maybe it's that? I just can't remember the specifics right now.