Multiple Choice
Which set of actions would you take to create a simple custom detection?
A) Add a SHA-256 value; upload a file to calculate a SHA-256 value; upload a text file that contains SHA-256 values.
B) Upload a packet capture; use a Snort rule; use a ClamAV rule.
C) Manually input the PE header data, the MD-5 hash, and a list of MD-5 hashes.
D) Input the file and file name.
Correct Answer:
Verified
Correct Answer:
Verified
Q104: For which application is Snort output suitable?<br>A)
Q105: Which preprocessor plays a role in detecting
Q106: Given the regular expression /[^Cc]at/, where does
Q107: Which option is used to implement suppression
Q108: An IPS addresses evasion by implementing countermeasures.
Q110: Which action can you take from the
Q111: In a FireAMP Private Cloud installation, deployed
Q112: Which action is valid for decoder/preprocessor stub
Q113: Which IPS placement option is the noisiest?<br>A)
Q114: Which integrated technology solution deals with application-centric