Question

Question 5 Given the following rule, choose the best description of what event would trigger an alert? alert tcp any any -> any 21 (content: "site exec"; content "%"; msg: "Attack detected"; sid:1000003;) Buffer overflow attempt using port 21 FTP Any content coming into port 21 Ping scan of port 21 5 pts

          Question 5
Given the following rule, choose the best description of what event would
trigger an alert?
alert tcp any any -> any 21 (content: "site exec"; content "%"; msg: "Attack
detected"; sid:1000003;)
Buffer overflow attempt using port 21 FTP
Any content coming into port 21
Ping scan of port 21
5 pts

Question 5
Given the following rule, choose the best description of what event would
trigger an alert?
alert tcp any any -> any 21 (content: "site exec"; content "%"; msg: "Attack
detected"; sid:1000003;)
Buffer overflow attempt using port 21 FTP
Any content coming into port 21
Ping scan of port 21
5 pts

Added by Lourdes C.

Computer Science and Information Technology

Trishna Knowledge Systems 2018 Edition

Instant Answer

Solved by Expert Akash M

09/17/2023

Step 1

It specifies that an alert should be triggered when a TCP packet is received on port 21 (FTP) that contains the strings "site exec" and "%". Show more…

Show all steps

Thanks for your feedback!

Question 5 5 pts Given the following rule, choose the best description of what event would trigger an alert? alert tcp any any -> any 21 (content: "site exec"; content "%"; msg: "Attack detected"; sid:1000003;) Buffer overflow attempt using port 21 FTP Any content coming into port 21 Ping scan of port 21