0 [{"id":27598,"quiz_id":"2561","answer_id":null,"answerType_id":"2","created_at":"2016-01-20 12:30:53","updated_at":"2016-01-20 12:32:22","questionName":"Match the switch with it's description","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":14,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27580,"quiz_id":"2561","answer_id":null,"answerType_id":"0","created_at":"2016-01-20 12:16:13","updated_at":"2016-01-20 12:32:22","questionName":"What does this command do? include $RULE_PATH\/telnet.rules ","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":5,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27596,"quiz_id":"2561","answer_id":null,"answerType_id":"2","created_at":"2016-01-20 12:27:35","updated_at":"2016-01-20 12:32:22","questionName":"Match the switch with it's description","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":12,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27574,"quiz_id":"2561","answer_id":null,"answerType_id":"0","created_at":"2016-01-20 12:09:23","updated_at":"2016-01-20 12:32:22","questionName":"Where do Snort's configuration files reside in Unix\/Linux? ","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":1,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27585,"quiz_id":"2561","answer_id":null,"answerType_id":"0","created_at":"2016-01-20 12:19:34","updated_at":"2016-01-20 12:32:22","questionName":"Which command starts verbose (sniffer) mode?","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":8,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27587,"quiz_id":"2561","answer_id":null,"answerType_id":"0","created_at":"2016-01-20 12:21:13","updated_at":"2016-01-20 12:32:22","questionName":"What is the -dev switch used for?","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":9,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27576,"quiz_id":"2561","answer_id":null,"answerType_id":"0","created_at":"2016-01-20 12:12:43","updated_at":"2016-01-20 12:32:22","questionName":"How does Snort launch via the command line? ","questionTimeSeconds":"0","questionTimeMinutes":"8","questionImagePath":null,"position":3,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27573,"quiz_id":"2561","answer_id":null,"answerType_id":"0","created_at":"2016-01-20 12:08:03","updated_at":"2016-01-20 12:32:22","questionName":"What is Snort?","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":0,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27584,"quiz_id":"2561","answer_id":null,"answerType_id":"0","created_at":"2016-01-20 12:18:34","updated_at":"2016-01-20 12:32:22","questionName":"Which command starts Snort in network intrusion detection mode?","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":7,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27582,"quiz_id":"2561","answer_id":null,"answerType_id":"0","created_at":"2016-01-20 12:17:08","updated_at":"2016-01-20 12:32:22","questionName":"Which command starts Snort in packet logger mode?","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":6,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27590,"quiz_id":"2561","answer_id":null,"answerType_id":"2","created_at":"2016-01-20 12:23:24","updated_at":"2016-01-20 12:32:22","questionName":"Match the switch with it's description","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":10,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27593,"quiz_id":"2561","answer_id":null,"answerType_id":"2","created_at":"2016-01-20 12:25:26","updated_at":"2016-01-20 12:32:22","questionName":"Match the switch with it's description","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":11,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27597,"quiz_id":"2561","answer_id":null,"answerType_id":"2","created_at":"2016-01-20 12:29:15","updated_at":"2016-01-20 12:32:22","questionName":"Match the switch with it's description","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":13,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27575,"quiz_id":"2561","answer_id":null,"answerType_id":"0","created_at":"2016-01-20 12:10:47","updated_at":"2016-01-20 12:32:22","questionName":"Where do Snort's configuration files reside in Windows? ","questionTimeSeconds":"0","questionTimeMinutes":"4","questionImagePath":null,"position":2,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null},{"id":27578,"quiz_id":"2561","answer_id":null,"answerType_id":"0","created_at":"2016-01-20 12:13:36","updated_at":"2016-01-20 12:32:22","questionName":"How does Snort define the local subnet? ","questionTimeSeconds":"0","questionTimeMinutes":"5","questionImagePath":null,"position":4,"explanation":null,"question_score_id":null,"lang":null,"questionAudioPath":null}]

block

Match the switch with it's description

Match the text (click and drag)   

(0/0)

Check Order Of Answers

---

Match the text
-m
-n
-N
-p

Click and drag
turns of packet logging
packet-count, process the given number of packets and exit
unmask
turns off promiscuous mode sniffing

Check Order of Answers

none

What does this command do? include $RULE_PATH/telnet.rules

Select the correct answer(s).  

(0/0)

---

Alerts on any ssh violations

Tells Snort to compare the packets to the rule set named telnet.rules and alert on anything it finds.

Tells Snort to copy the packets to the rule set named telnet.rules and alert on anything it finds.

Tells Snort to compare the packets to the rule set named telnet.rules and ignores anything it finds.

none

Match the switch with it's description

Match the text (click and drag)   

(0/0)

Check Order Of Answers

---

Match the text
-F bfp-file
-g
-h
-i

Click and drag
Reads berkely packet filters from bpf file
home-net, set the home network to a specific address
Changes the group id or GID under which snort runs after it starts
interface, specifies which interface snort should listen on

Check Order of Answers

none

Where do Snort's configuration files reside in Unix/Linux?

Select the correct answer(s).  

(0/0)

---

/bin/snort

/var/snort

/etc/snort

c:\snort\etc\

none

Which command starts verbose (sniffer) mode?

Select the correct answer(s).  

(0/0)

---

./snort -V

./snort -v

./snort -S

./snort -s

none

What is the -dev switch used for?

Select the correct answer(s).  

(0/0)

---

it determines which switches can be combined

used to run snort to capture packets

used to develop commands

It enables other switches

none

How does Snort launch via the command line?

Select the correct answer(s).  

(0/0)

---

snort -l c"\snort\log\ -c c:\snort\etc\

snort -l c"\snort\log\ -c c:\snort\etc\snort.conf

snort -c"\snort\log c:\snort\etc\snort.conf

./snort -L

none

What is Snort?

Select the correct answer(s).  

(0/0)

---

Snort is a forensic packet analyzer

Snort is an anti-malware application

Snort is an IDS, sniffer, and packet logger.

Snort is a firewall

none

Which command starts Snort in network intrusion detection mode?

Select the correct answer(s).  

(0/0)

---

./snort ./log -h 192.168.1.0/24 -c snort.conf

./snort -dev -l ./log -h 192.168.1.0/24 snort.conf

./snort -dev -l ./log -h 192.168.1.0/24 -c snort

./snort -dev -l ./log -h 192.168.1.0/24 -c snort.conf

none

Which command starts Snort in packet logger mode?

Select the correct answer(s).  

(0/0)

---

./snort -dev -l ./log

./snort -dev -l

./snort -l ./log

-dev -l ./log

none

Match the switch with it's description

Match the text (click and drag)   

(0/0)

Check Order Of Answers

---

Match the text
-A
-b
-B
-c

Click and drag
Fast mode -only log the timestamp, alert message, source, port and destination IP
Logs packets in tcpdump format
address conversion mask
config-file

Check Order of Answers

none

Match the switch with it's description

Match the text (click and drag)   

(0/0)

Check Order Of Answers

---

Match the text
-d
-D
-dev
-e

Click and drag
displays application layer data when in verbose mode
Displays the link layer packet headers
Run snort in demon mode
used to run snort to capture packets

Check Order of Answers

none

Match the switch with it's description

Match the text (click and drag)   

(0/0)

Check Order Of Answers

---

Match the text
-I
-k
-l
-L

Click and drag
binary-log file
logging directory
In alerts, displays the interface on which each packet arrived
checksum mode

Check Order of Answers

none

Where do Snort's configuration files reside in Windows?

Select the correct answer(s).  

(0/0)

---

c:\program files\snort

c:\program files (x86)\snort

c:\snort\etc\

/etc/snort

none

How does Snort define the local subnet?

Select the correct answer(s).  

(0/0)

---

snort -HOME-NET 192.168.1.0/24

var NET 192.168.1.0/24

var HOME-NET snort

var HOME-NET 192.168.1.0/24