GAQM CPEH-001 Exam - Topic 1 Question 29 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 29
Topic #: 1

Snort is an open source Intrusion Detection system. However, it can also be used for a few other purposes as well. Which of the choices below indicate the other features offered by Snort?

AIDS, Packet Logger, Sniffer

BIDS, Firewall, Sniffer

CIDS, Sniffer, Proxy

DIDS, Sniffer, content inspector

Show Suggested Answer

Suggested Answer: A

Snort is a free software network intrusion detection and prevention system capable of performing packet logging & real-time traffic analysis, on IP networks. Snort was written by Martin Roesch but is now owned and developed by Sourcefire

by Janine at May 09, 2022, 05:23 PM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rosina

4 months ago

Surprised to see it can do content inspection too!

upvoted 0 times

...

Yong

4 months ago

Wait, can it really be used as a firewall?

upvoted 0 times

...

Maryann

4 months ago

Totally agree, it's versatile!

upvoted 0 times

...

Catarina

4 months ago

I thought it was just an IDS, but it does more?

upvoted 0 times

...

Kallie

5 months ago

Snort can definitely act as a packet logger!

upvoted 0 times

...

Christene

5 months ago

I thought Snort could do a lot, but I can't recall if it has a content inspector feature. I might need to double-check that!

upvoted 0 times

...

Isadora

5 months ago

I practiced a question similar to this, and I think the sniffer feature is definitely included. I’m leaning towards option A as well.

upvoted 0 times

...

Shaun

5 months ago

I’m not entirely sure, but I feel like Snort doesn’t work as a firewall. I think it’s more about monitoring and logging.

upvoted 0 times

...

Timothy

5 months ago

I remember Snort being primarily an IDS, but I think it can also function as a packet logger and sniffer. So, maybe option A?

upvoted 0 times

...

Muriel

5 months ago

Hmm, I know Kerberos is related to authentication, so I'm thinking it's probably an authentication protocol.

upvoted 0 times

...

Jacquelyne

5 months ago

Hmm, I'm a little unsure about this one. Is skimming when you set a low price to gain acceptance for a new product? Or is that something else? I'll have to think this through carefully.

upvoted 0 times

...

Dion

5 months ago

I don't think Porter's Five Forces Model applies directly to business architecture, but it seems related to competitive analysis.

upvoted 0 times

...