SCP Exam SC0-451 Topic 5 Question 101 Discussion

Actual exam question for SCP's SC0-451 exam

Question #: 101
Topic #: 5

You are configuring your Snort rules and you wish to tell Snort to log and send notice when a type of packet is received, what rule action syntax will you use?

AAlert

BLog

CPass

DActivate

EDynamic

Show Suggested Answer

Suggested Answer: A

by Dorathy at Sep 15, 2024, 03:27 PM

Limited Time Offer

25%

Off

Get Premium SC0-451 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Willard

7 months ago

Wait, is Snort like a security system or a dinosaur? I'm just imagining a bunch of T-Rexes sniffing out network traffic. That's a mental image I didn't need.

upvoted 0 times

...

Matthew

7 months ago

I'm not sure, but I think 'Log' could also be used to achieve the same result.

upvoted 0 times

...

Rory

7 months ago

Hey, I heard Snort was a great way to catch a cold. Guess I'll have to try the 'Achoo!' rule action syntax instead.

upvoted 0 times

Mitsue

6 months ago

Definitely go with 'Alert' to configure Snort to log and send notice for the packet type you're looking for.

upvoted 0 times

...

Paul

6 months ago

Yeah, 'Alert' is the correct rule action syntax to log and send notice for a specific packet type.

upvoted 0 times

...

Edna

6 months ago

I think you should use the 'Alert' rule action syntax for that.

upvoted 0 times

...

Loren

7 months ago

I agree with Huey, using 'Alert' will log and send notice when a type of packet is received.

upvoted 0 times

...

Huey

7 months ago

I think the correct rule action syntax to use is A) Alert.

upvoted 0 times

...

Dawne

7 months ago

Aha! A) Alert is the way to go. I can already see the packets being logged and the notices being sent. Easy peasy!

upvoted 0 times

...

Elli

7 months ago

Hmm, B) Log seems like a good option, but I'm not entirely convinced. I'll have to double-check the Snort documentation.

upvoted 0 times

Dortha

5 months ago

User 4: Let's check the documentation to confirm the correct rule action syntax.

upvoted 0 times

...

Doyle

5 months ago

User 3: Alert might be a better option for sending notice.

upvoted 0 times

...

Aron

6 months ago

User 2: I agree, but let's verify in the Snort documentation to be sure.

upvoted 0 times

...

Sabina

6 months ago

I think B) Log is the right choice for logging and sending notice.

upvoted 0 times

...

Huey

7 months ago

E) Dynamic? Really? That's not even close to what we're looking for. I'm sticking with A) Alert.

upvoted 0 times

...

Lasandra

7 months ago

D) Activate looks promising, but I'm not sure if that's the correct syntax for what we're trying to achieve here.

upvoted 0 times

Shantay

6 months ago

D) Activate is not the correct syntax for this, it is used to enable a specific rule or preprocessor.

upvoted 0 times

...

Johana

6 months ago

B) Log is not the correct syntax for this, it simply logs the packet without sending a notice.

upvoted 0 times

...

Geraldo

7 months ago

A) Alert is the correct syntax for telling Snort to log and send notice when a type of packet is received.

upvoted 0 times

...

Bulah

7 months ago

I think the answer is A) Alert. That's the rule action syntax to log and send a notice when a specific type of packet is received.

upvoted 0 times

Olen

6 months ago

Definitely A) Alert, that's the rule action syntax for logging and sending a notice.

upvoted 0 times

...

Lera

6 months ago

I think you're right, A) Alert is the way to go for that configuration.

upvoted 0 times

...

Layla

7 months ago

Yes, A) Alert is what you would use to log and send a notice for a specific packet.

upvoted 0 times

...

Janna

7 months ago

I agree, A) Alert is the correct rule action syntax for that.

upvoted 0 times

...