SCP Exam SC0-402 Topic 2 Question 28 Discussion

Actual exam question for SCP's SC0-402 exam

Question #: 28
Topic #: 2

You are configuring your new IDS machine, and are creating new rules. You enter the following rule:

Alert tcp any any -> 100100/24 (msg: ''O/S Fingerprint detected''; flags: S12;)

What is the effect of this rule?

AThis is a logging rule, designed to capture Operating System detection traffic.

BThis is an alert rule, designed to notify you of attempts at learning Operating Systems in one direction.

CThis is an alert rule, designed to notify you of attempts at learning Operating Systems in either direction.

DThis is a logging rule, designed to notify you of Operating System detection attempts.

EThis is a logging rule, designed to capture Operating System detection traffic originating from the 100100/24 network.

Show Suggested Answer

Suggested Answer: B

by Donette at May 04, 2022, 12:37 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!