Câu 14: GCIA: GIAC Certified Intrusion Analyst

Which of the following statements are true about snort?Each correct answer represents a complete solution. Choose all that apply.

1. A. It develops a new signature to find vulnerabilities. — đáp án hiện tại
2. B. It detects and alerts a computer user when it finds threats such as buffer overflows, stealth port scans, CGI attacks, SMB probes and NetBIOS queries, NMAP and other port scanners, well-known backdoors and system vulnerabilities, and DDoS clients. — đáp án hiện tại
3. C. It encrypts the log file using the 256 bit AES encryption scheme algorithm.
4. D. It is used as a passive trap to record the presence of traffic that should not be found on a network, such as NFS or Napster connections. — đáp án hiện tại