Which rule action will cause Snort IPS to block and log a packet?

Last Updated: Jun 1, 2021
IT Exam Items Repository › Category: CCNA Security › Which rule action will cause Snort IPS to block and log a packet?

Which rule action will cause Snort IPS to block and log a packet?

  • log
  • drop
  • alert
  • Sdrop

Explanation: Snort IPS mode can perform all the IDS actions plus the following:
- Drop - Block and log the packet.
- Reject - Block the packet, log it, and then send a TCP reset if the protocol is TCP or an ICMP port unreachable message if the protocol is UDP.
- Sdrop - Block the packet but do not log it.

Related exam: Network Security Final Exam Answers

About The Author

ITExam Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.