MENU
John works as a Network Security Professional. He is assigned a project to test the security of www.we-are-secure.com. He is working on the Linux operating system and wants to install an Intrusion Detection System on the We-are-secure server so that he can receive alerts about any hacking attempts. Which of the following tools can John use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: B, C
Get Premium GCIA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
RO
Rosalia
11 months ago
I agree, Snort is the go-to for most pros.
AN
Annice
11 months ago
Definitely surprised to see Samhain listed here!
AS
Ashlyn
11 months ago
SARA could work, but it's not as popular as the others.
TE
Teri
12 months ago
I think Tripwire is more for file integrity, not IDS.
IR
Iraida
12 months ago
Snort is a solid choice for IDS!
CH
Chu
1 year ago
I feel like SARA is more of a vulnerability assessment tool, so I'm leaning towards Snort and Samhain for this question.
QU
Quentin
1 year ago
I practiced a similar question before, and I believe both Snort and Tripwire were mentioned as effective tools.
RA
Ramonita
1 year ago
I think Samhain is definitely an option for an IDS, but I can't recall if Tripwire fits into that category too.
BR
Brandon
1 year ago
I remember studying Snort as a popular IDS tool, but I'm not sure if SARA is also used for that purpose.
MI
Mila
1 year ago
I'm pretty sure the Dependency Model Builder is the feature used to build relationships between Entity Classes in the Classic UI. I remember learning about that in class.
ST
Stefany
1 year ago
Hmm, I'm a bit unsure about this one. The environment details seem pretty basic, but I'm not totally familiar with Citrix's recommended practices. Might need to do some quick research to make sure I'm on the right track.
CH
Chauncey
1 year ago
Ah, I've seen this type of question before. The key is to focus on the specific wording of the commands. "splunk clear kvstore" sounds like the most direct way to clear the KV store, so I'll go with that.
MA
Mayra
1 year ago
Hmm, this is a tricky one. I'm not entirely sure which transformational flow process is the correct answer. I'll need to think this through carefully and review my notes before making a decision.