SCP Exam SC0-451 Topic 5 Question 85 Discussion

Actual exam question for SCP's SC0-451 exam

Question #: 85
Topic #: 5

You are configuring your new IDS machine, and are creating new rules. You enter the following rule: Alert tcp any any -> 10.0.10.0/24 any (msg: "NULL scan detected"; flags: 0;) What is the effect of this rule?

AThis is a logging rule, designed to capture NULL scans originating from the 10.0.10.0/24 network.

BThis is a logging rule, designed to capture NULL scans.

CThis is an alert rule, designed to notify you of NULL scans of the network in either direction.

DThis is an alert rule, designed to notify you of NULL scans of the network in one direction.

EThis is a logging rule, designed to notify you of NULL scans.

Show Suggested Answer

Suggested Answer: D

by Cordelia at Apr 22, 2024, 02:51 AM

Limited Time Offer

25%

Off

Get Premium SC0-451 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tracey

10 days ago

Yes, it seems like it. It's designed to capture those specific scans.

upvoted 0 times

...

Larae

11 days ago

So, it's a logging rule specifically for NULL scans from that network?

upvoted 0 times

...

Tracey

12 days ago

I think the effect of this rule is to capture NULL scans originating from the 10.0.10.0/24 network.

upvoted 0 times

...