Home
Exams
Providers
About
Sign In
Sign Up
Home
/
Exams
/
GIAC GIAC Certified Enterprise Defender
/
Question #8
#8
Multiple Choice
Mark for review
Why would the pass action be used in a Snort configuration file?
A.
The pass action simplifies some filtering by specifying what to ignore.
B.
The pass action passes the packet onto further rules for immediate analysis.
C.
The pass action serves as a placeholder in the snort configuration file for future rule updates.
D.
Using the pass action allows a packet to be passed to an external process.
E.
The pass action increases the number of false positives, better testing the rules.
Reveal Answer
Previous
Question 8 of 75
Exam GCED Topic 1 Question 9
Back to all questions
Next
Sign In
Sign Up