Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Cisco 350-201 Exam - Topic 6 Question 24 Discussion

An engineer wants to review the packet overviews of SNORT alerts. When printing the SNORT alerts, all the packet headers are included, and the file is too large to utilize. Which action is needed to correct this problem?
A) Modify the alert rule to ''output alert_syslog: output log''
B) Modify the output module rule to ''output alert_quick: output filename''
C) Modify the alert rule to ''output alert_syslog: output header''
D) Modify the output module rule to ''output alert_fast: output filename''

Cisco 350-201 Exam - Topic 6 Question 24 Discussion

Actual exam question for Cisco's 350-201 exam
Question #: 24
Topic #: 6
[All 350-201 Questions]

An engineer wants to review the packet overviews of SNORT alerts. When printing the SNORT alerts, all the packet headers are included, and the file is too large to utilize. Which action is needed to correct this problem?

Show Suggested Answer Hide Answer
Suggested Answer: A

%2F20201231%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20201231T141156Z&X-Amz- Expires=172800&X-Amz-SignedHeaders=host&X-Amz- Signature=e122ab6eb1659e13b3bc6bb2451ce693c0298b76c1962c3743924bc5fd83d382

by Ligia at May 05, 2022, 12:49 AM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Graciela
10 months ago
I agree, D is the best way to go for manageable files!
upvoted 0 times
...
Daniel
10 months ago
Wait, why would you want to include all headers? Seems excessive.
upvoted 0 times
...
Rasheeda
11 months ago
Definitely not A, that won't help with the size.
upvoted 0 times
...
Kenneth
11 months ago
I think B could work too, but not sure.
upvoted 0 times
...
Corazon
11 months ago
Option D is the right choice!
upvoted 0 times
...
Jolene
11 months ago
This seems like a straightforward incident response question. I'd start by containing the damage and isolating the infected device to prevent the Trojan from spreading.
upvoted 0 times
...
Marylou
11 months ago
Okay, let me see here. I know worms can self-replicate, but I'm not sure if that's the major difference from Trojans. I'll have to think this through step-by-step.
upvoted 0 times
...
Alverta
11 months ago
I'll mark C and move on quickly. Don't want to overthink this and waste exam time.
upvoted 0 times
...
Nieves
11 months ago
I feel like Sony/SDH switching was mentioned in one of our group studies, maybe it's that? I just can't remember the specifics right now.
upvoted 0 times
...

Save Cancel