<< Prev Question Next Question >>

Question 24/59

To execute a command in Linux while in the directory where it is located, and be sure you are only running that particular copy, what would you use in front of the executable name?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (59q)
Question 1: What does packet sniffing do?
Question 2: Which preprocessor maintains connection state so that attack...
Question 3: Which action is valid for decoder/preprocessor stub rules?...
Question 4: Which action should you perform to enable or disable entire ...
Question 5: Which IPS placement option is the noisiest?...
Question 6: Which syntax correctly expresses a port variable?...
Question 7: Which protocol operates below the network layer?...
Question 8: Given the rule option byte_jump:4,4,relative, align;, how ma...
Question 9: When you instruct Snort to place ASCII-formatted log data in...
Question 10: If Snort is installed and the sensor, database, and web serv...
Question 11: When Snort receives packets, in which order are they placed ...
Question 12: Which preprocessor plays a role in detecting the reconnaissa...
Question 13: Which statement about the detection engine configuration set...
Question 14: What must you do to produce ASCII-formatted output from Snor...
Question 15: Which area is created between screening devices in an egress...
Question 16: Which technique can an intruder use to try to evade detectio...
Question 17: How is the basic construct of a port variable formatted in t...
Question 18: What is VRT?
Question 19: Which file is the primary configuration file for keeping rul...
Question 20: Which preprocessor provides a means to measure Snort perform...
Question 21: Barnyard has a mode of operation that reads the most current...
Question 22: Which file defines Snort IDs and associated alert labels tha...
Question 23: In the IP addressing scheme of your organization, each subne...
Question 24: To execute a command in Linux while in the directory where i...
Question 25: What does the log_dump output plug-in do?...
Question 26: Which preprocessor uses a global directive and an engine ins...
Question 27: A Snort sensor is generating many false-positive sfPortscan ...
Question 28: Which keyword can you use to try to close a session when an ...
Question 29: Which character must a rule body end with?...
Question 30: Given the regular expression /[^Cc]at/, where does the syste...
Question 31: Which statement about the FTP Telnet preprocessor is true?...
Question 32: Which rule keyword categorizes alerts into attack classes?...
Question 33: Which application can read Barnyard log_pcap output plug-in ...
Question 34: Given the rule option byte_test:1, ,64,2;, what is the offse...
Question 35: Which version of libpcap does DAQ require?...
Question 36: What is the minimum action that you should take when configu...
Question 37: On which protocol does Snort focus to decode, process, and a...
Question 38: Which statement about implementing DAQ is true?...
Question 39: Which command-line argument can you use with Snort to read a...
Question 40: What does protocol normalization do?...
Question 41: To accept input from Snort and produce various forms of outp...
Question 42: Other than intrusion sensing, which other function set can S...
Question 43: What is the primary source for Snort rules?...
Question 44: Which output is in a lightweight, binary form?...
Question 45: Which preprocessor can normalize the IIS %u encoding scheme?...
Question 46: Which keyword can you use to check a packet IP header TTL va...
Question 47: For which application is Snort output suitable?...
Question 48: An IPS addresses evasion by implementing countermeasures. Wh...
Question 49: What is a GID?
Question 50: Which engine or module presents alert and log data in the fo...
Question 51: When building a platform for a Snort installation, which set...
Question 52: Which output method is the fastest for Snort?...
Question 53: Which component is one of the four primary components of Sno...
Question 54: Which statement about the distribution of SO rules is true?...
Question 55: Which information does the rule body contain?...
Question 56: Which command-line argument can you use with Snort to produc...
Question 57: Which management and analysis tool can you use to enhance a ...
Question 58: Which configuration is optimal for the frag3 engine?...
Question 59: What is the purpose of using a span or monitor port on a swi...