Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

Welcome to Pass4Success

- Free Preparation Discussions

Mail Us support@pass4success.com

Location PL

Home
Popular vendors
- - Salesforce
  - Microsoft
  - Nutanix
  - Cisco
  - Amazon
  - Google
  - CompTIA
  - SAP
  - VMware
  - Oracle
  - Fortinet
  - PeopleCert
  - Eccouncil
  - HP
  - Palo Alto Networks
  - Adobe
  - ISC2
  - ServiceNow
  - Dell EMC
  - CheckPoint
Discount Deals New
About
Contact
Login
Sign up

Home
Discussions
GIAC Discussions
Exam GSEC Topic 6 Question 42 Discussion

GIAC Exam GSEC Topic 6 Question 42 Discussion

Actual exam question for GIAC's GIAC Security Essentials exam

Question #: 42
Topic #: 6

[All GIAC Security Essentials Questions]

Use sudo to launch Snort with the, /etc /snort /snort.conf file In full mode to generate alerts based on incoming traffic to echo. What is the source IP address of the traffic triggering an alert with a destination port of 156?

Note: Snort Is configured to exit after It evaluates 50 packets.

A192.168.^.30

B10.72.101.210

C10.10.28.19

D10.11.10.11

E10.10.10.66

F192.168.87.68

G10.12.10.112

H10.11.12.13

I10.10.201.150

J10.10.199.146

Show Suggested Answer Hide Answer

Suggested Answer: I

by Evangelina at Apr 09, 2024, 05:11 AM

Limited Time Offer

25%

Off

Get Premium GSEC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shay

1 days ago

I'm not sure, but I believe the source IP address could also be E) 10.10.10.66.

upvoted 0 times

...

Clemencia

2 days ago

I think the answer might be C) 10.10.28.19 because it seems to fit the criteria.

upvoted 0 times

...

Helga

24 days ago

Okay, let's think this through step-by-step. We need to use sudo to launch Snort with the specified config file, and then find the source IP of the traffic triggering an alert on port 156.

upvoted 0 times

...

Elenore

26 days ago

Wait, did they say Snort is configured to exit after evaluating 50 packets? That's an unusual setting, but it might help us narrow down the answer.

upvoted 0 times

...

Natalya

27 days ago

I hope the answer choices aren't too tricky. Sometimes these certification exams try to mislead you with similar-looking IP addresses.

upvoted 0 times

...

Lorriane

28 days ago

Ah, I see the key is to find the source IP address of the traffic triggering an alert with a destination port of 156. That's a good way to test our Snort knowledge.

upvoted 0 times

...