Multiple Choice
Which action should you perform to enable or disable entire classes of rules through the snort.conf file?
A) Specify the -e or :-d command-line argument.
B) Comment or uncomment the rule class.
C) Build and reference a separate rules-configuration file.
D) Specify the enable or the disable argument.
Correct Answer:
Verified
Correct Answer:
Verified
Q62: Which file defines Snort IDs and associated
Q63: Which option is true when configuring an
Q64: If Snort is installed and the sensor,
Q65: Other than navigating to the Network File
Q66: What are two reasons why companies need
Q68: FireSIGHT recommendations appear in which layer of
Q69: Which option is one of the three
Q70: Which option is true regarding the $HOME_NET
Q71: Which character must a rule body end
Q72: One of the goals of geolocation is