Câu 13: GCED: GIAC Certified Enterprise Defender

Why would the pass action be used in a Snort configuration file?

1. A. The pass action simplifies some filtering by specifying what to ignore. — đáp án hiện tại
2. B. The pass action passes the packet onto further rules for immediate analysis.
3. C. The pass action serves as a placeholder in the snort configuration file for future rule updates.
4. D. Using the pass action allows a packet to be passed to an external process.
5. E. The pass action increases the number of false positives, better testing the rules.