500-280 無料問題集「Cisco Securing Cisco Networks with Open Source Snort」

（A）converts data to CVS format

（B）converts log data to PCAP-formatted output

（C）converts data into a format similar to Snort fast alert mode

（D）converts data into a format similar to Snort ASCII packet dump mode

（A）pulledpork.conf

（B）snort.conf

（C）pulled.config

（D）porker.conf

（A）removes application layer data, whether or not it carries protocol-induced anomalies, so that packet headers can be inspected more accurately for signs of abuse

（B）compares a packet to related traffic from the same session, to determine whether the packet is out of sequence

（C）removes any protocol-induced or protocol-allowable ambiguities

（D）compares evaluated packets to normal, daily network-traffic patterns

（A）IP address, mask, and gateway settings

（B）URL feed vendors

（C）host naming conventions

（D）default accounts and settings

（A）Bind client IP addresses to policies that represent operating systems, so that clients can process traffic the same way that the IPS engine does.

（B）Bind target IP addresses to policies that represent operating systems, so that the IPS engine can process traffic the same way that target hosts do.

（C）Keep the configuration as simple as possible, for better performance.

（D）Deploy the engine only in passive mode, for better performance.

（A）parenthesis

（B）semicolon

（C）period

（D）exclamation mark