Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Snort output reports are tested on the Certified Ethical Hacker examination. Snort rules are used to generate alerts based on the traffic that is viewed by the IDS processing engine. All of these are possible rule headers EXCEPT?
Protocol
Rule action
Encapsulation
Destination address and port
The correct response is encapsulation. Encapsulation is not a possible rule header. Rule headers include rule action, protocol, service address and port, and destination address and port.
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.