Quantcast
Channel: Latest Cisco 200-120 Real Exam – CCNA Dump Free Real Practice Questions and Answers
Viewing all articles
Browse latest Browse all 24

[Free] 2018(Aug) Dumps4cert Cisco 200-120 Dumps with VCE and PDF Download 21-30

$
0
0

Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 Aug Cisco Official New Released 200-120
100% Free Download! 100% Pass Guaranteed!

Securing Cisco Networks with Open Source Snort

Question No: 21

Which application can read Barnyard log_pcap output plug-in files?

  1. SnortReport

  2. BASE or ACID

  3. tcpdump

  4. Snorby

Answer: C

Question No: 22

To accept input from Snort and produce various forms of output, the Barnyard architecture consists of which components?

  1. preprocessors and reassemblers

  2. preprocessors and detection engine

  3. data processors and output plug-ins

  4. data processors and reassemblers

Answer: C

Question No: 23

Barnyard has a mode of operation that reads the most current unified log file and processes new unified files as they become available. What is this mode called?

  1. one-shot

  2. continual

  3. continual with checkpoint

  4. unified

Answer: B

Question No: 24

What does the log_dump output plug-in do?

  1. converts data into a format similar to Snort ASCII packet dump mode

  2. converts data into a format similar to Snort fast alert mode

  3. converts log data to PCAP-formatted output

  4. converts data to CVS format

Answer: A

Question No: 25

Which output method is the fastest for Snort?

  1. unified2

  2. database

  3. binary (tcpdump)

  4. CSV

Answer: A

Question No: 26

Which command-line argument can you use with Snort to produce a binary output file?

  1. -B

  2. -b

  3. -u

  4. -U

Answer: B

Question No: 27

Which command-line argument can you use with Snort to read a previously created file?

  1. -O

  2. -o

  3. -p

  4. -r

Answer: D

Question No: 28

What must you do to produce ASCII-formatted output from Snort?

  1. Do nothing because Snort produces ASCII output by default.

  2. Use the -K ascii switch when you start Snort from the command line.

  3. Compile Snort with the -K ascii flag in the configure command.

  4. Use a third-party application to convert native Snort output to ASCII.

Answer: B

Question No: 29

For which application is Snort output suitable?

  1. tcpdump

  2. Wireshark

  3. any application that can read PCAP format

  4. NMap

Answer: C

Question No: 30

When you instruct Snort to place ASCII-formatted log data in a specific directory, what does Snort use to organize the alert data?

  1. IP address

  2. port number

  3. packet

  4. interface

Answer: A

100% Dumps4cert Free Download!
200-120 PDF
100% Dumps4cert Pass Guaranteed!
200-120 Dumps

Dumps4cert ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

Viewing all articles
Browse latest Browse all 24

Trending Articles