Online Access Free 500-280 Practice Test

Which area is created between screening devices in an egress/ingress path for housing web, mail, or DNS servers?

• A.EMZ
• B.inlet
• C.harbor
• D.DMZ

Which preprocessor uses a global directive and an engine instance directive in the snort.conf file for configuration to provide target context during packet reassembly?

• A.sfPortscan
• B.frag3
• C.SMTP
• D.frag2

How is the basic construct of a port variable formatted in the Snort.conf file?

• A.portvar value
• B.variable
• C.var arguments
• D.port variable

A Snort sensor is generating many false-positive sfPortscan alerts, in which busy, trusted hosts are flagged as the source of port sweep events. Which tuning strategy can mitigate this problem?

• A.Apply a rule threshold.
• B.Add the host to the Watch IP list.
• C.Add the host to the Ignore Scanned list.
• D.Add the host to the Ignore Scanner list.

Which statement about the detection engine configuration settings in snort.conf is true?

• A.Some decoder settings are on and others must be uncommented.
• B.All the decoder alerts are on by default.
• C.All the decoder settings are off by default.
• D.The decoder is no longer in use.