Free Cisco 500-280 Exam Dumps Questions & Answers

How is the basic construct of a port variable formatted in the Snort.conf file?

• A.  port variable
• B.  portvar value
• C.  var arguments
• D.  variable

Other than intrusion sensing, which other function set can Snort perform?

• A.  packet sniffing and logging
• B.  packet sniffing and disassembly
• C.  packet logging and alerting
• D.  intrusion sensing and packet sniffing

Given the rule option byte_jump:4,4,relative, align;, how many bytes are being jumped?

• A.  cannot be determined
• B.  align
• C.  4
• D.  relative

If Snort is installed and the sensor, database, and web server all reside on the same machine, to which ports should remote access of the sensor be restricted?

• A.  23 and 80
• B.  80 and 443
• C.  22 and 443
• D.  443 and 3306

Which preprocessor can normalize the IIS %u encoding scheme?

• A.  http_inspect
• B.  sfPortscan
• C.  SMTP
• D.  ftp_telnet