Pass Your Exam With Cisco 500-280 Braindumps

Question No. 1

Which character must a rule body end with?

• A. parenthesis
• B. period
• C. exclamation mark
• D. semicolon

Question No. 2

When you instruct Snort to place ASCII-formatted log data in a specific directory, what does Snort use to organize the alert data?

• A. IP address
• B. port number
• C. packet
• D. interface

Question No. 3

Which preprocessor plays a role in detecting the reconnaissance phase of an attack?

• A. sfPortscan
• B. frag3
• C. telnet_decode
• D. rpc_decode

Question No. 4

Which file is the primary configuration file for keeping rules up to date?

• A. pulled.config
• B. porker.conf
• C. snort.conf
• D. pulledpork.conf

Question No. 5

What does the log_dump output plug-in do?

• A. converts data into a format similar to Snort ASCII packet dump mode
• B. converts data into a format similar to Snort fast alert mode
• C. converts log data to PCAP-formatted output
• D. converts data to CVS format

Question No. 6

When building a platform for a Snort installation, which set of components is a major security concern?

• A. IP address, mask, and gateway settings
• B. host naming conventions
• C. URL feed vendors
• D. default accounts and settings