Which tool can perform real-time traffic and port analysis, and can also detect port scans, fingerprinting and buffer overflow attacks?

IT Exam Items RepositoryCategory: CCNA SecurityWhich tool can perform real-time traffic and port analysis, and can also detect port scans, fingerprinting and buffer overflow attacks?

Which tool can perform real-time traffic and port analysis, and can also detect port scans, fingerprinting and buffer overflow attacks?

  • SIEM
  • Nmap
  • Snort
  • Netflow

Explanation: Snort is an open source intrusion protection system (IPS) that is capable of performing real-time traffic and port analysis, packet logging, content searching and matching, as well as detecting probes, attacks, port scans, fingerprinting, and buffer overflow attacks.

Related exam: Modules 11 - 12: Intrusion Prevention Group Exam Answers
Related exam: Introduction to Cybersecurity Chapter 4 Quiz