GIAC GISP Exam - Topic 4 Question 66 Discussion

Actual exam question for GIAC's GISP exam

Question #: 66
Topic #: 4

[All GISP Questions]

Which of the following is an open source network intrusion detection system?

ASourcefire

BNETSH

CMacof

DSnort

Show Suggested Answer

Suggested Answer: A

by Jeannetta at Jan 28, 2025, 11:58 AM

Limited Time Offer

25%

Off

Get Premium GISP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Margo

6 months ago

Wait, Snort is open source? That's cool!

upvoted 0 times

...

Venita

6 months ago

I can't believe people still confuse these!

upvoted 0 times

...

Detra

6 months ago

Nope, Sourcefire is proprietary.

upvoted 0 times

...

Shanda

7 months ago

I thought Sourcefire was open source too?

upvoted 0 times

...

Aleisha

7 months ago

Snort is definitely the right answer!

upvoted 0 times

...

Earnestine

7 months ago

NETSH sounds familiar, but I don't think it's an intrusion detection system. I’m leaning towards Snort for this one.

upvoted 0 times

...

Reid

7 months ago

I feel like Sourcefire is related to Snort somehow, but I can't recall if it's open source or not.

upvoted 0 times

...

Eloisa

8 months ago

I remember practicing with a question about intrusion detection systems, and Snort was definitely mentioned as open source.

upvoted 0 times

...

Dell

8 months ago

I think Snort is the one we're looking for, but I'm not completely sure about Macof.

upvoted 0 times

...

Devorah

8 months ago

Snort is the answer - I'm confident that's the open source network intrusion detection system mentioned in the question.

upvoted 0 times

...

Jackie

8 months ago

I'm a bit unsure about this one. Let me think through the characteristics of each option to determine which is the open source NIDS.

upvoted 0 times

...

Jacob

8 months ago

Ah, I remember learning about Snort in class. That's definitely the open source NIDS option here.

upvoted 0 times

...

Tammy

8 months ago

Sourcefire sounds familiar, but I'm not certain if it's open source. I'll have to think this through carefully.

upvoted 0 times

...

Casie

8 months ago

Hmm, I think Snort is the open source network intrusion detection system, but I'll double-check the other options just to be sure.

upvoted 0 times

...

Twanna

1 year ago

Macof? Isn't that a MAC address flooding tool? Definitely not an NIDS. Snort is the clear winner.

upvoted 0 times

Brandon

11 months ago

Sourcefire and NETSH are not NIDS, so Snort is the best choice.

upvoted 0 times

...

Willis

11 months ago

I agree, Snort is an open source network intrusion detection system.

upvoted 0 times

...

Argelia

11 months ago

Yes, you're right. Macof is a MAC address flooding tool, not an NIDS.

upvoted 0 times

...

Casie

1 year ago

Wait, NETSH? Isn't that just a Windows command-line tool? How is that even an option here?

upvoted 0 times

Steffanie

11 months ago

D) Snort is the correct answer. It is an open source network intrusion detection system.

upvoted 0 times

...

Ahmed

11 months ago

Yeah, NETSH is a Windows command-line tool, not an open source network intrusion detection system.

upvoted 0 times

...

Launa

11 months ago

D) Snort

upvoted 0 times

...

Elina

12 months ago

C) Macof

upvoted 0 times

...

Reena

12 months ago

B) NETSH

upvoted 0 times

...

Jillian

1 year ago

A) Sourcefire

upvoted 0 times

...

Remona

1 year ago

I'm pretty sure Sourcefire is just a commercial product, not open source. Snort all the way!

upvoted 0 times

Genevieve

12 months ago

Yeah, Snort is the best choice out of the options provided.

upvoted 0 times

...

Zoila

1 year ago

Snort is definitely the open source network intrusion detection system.

upvoted 0 times

...

Corinne

1 year ago

I agree, Sourcefire is not open source. Snort is the way to go.

upvoted 0 times

...

Brigette

1 year ago

I'm not sure, but I think Sourcefire is also a network security system.

upvoted 0 times

...

Ty

1 year ago

Hmm, Snort is definitely the correct answer here. It's the most widely-used open source NIDS out there.

upvoted 0 times

Alease

1 year ago

Yes, Snort is the correct answer. It is widely used as an open source NIDS.

upvoted 0 times

...

Tyra

1 year ago

I believe the correct answer is Snort.

upvoted 0 times

...

Marge

1 year ago

No, Sourcefire is not an open source network intrusion detection system.

upvoted 0 times

...

Angella

1 year ago

I think the answer is Sourcefire.

upvoted 0 times

...

Reiko

1 year ago

I agree with Mariann, Snort is an open source network intrusion detection system.

upvoted 0 times

...

Mariann

1 year ago

I think the answer is D) Snort.

upvoted 0 times

...