Which statement describes the status after the Security Onion VM is started?
- SGUIL becomes enabled via the sudo sguil -e terminal command.
- Awk becomes enabled via the sudo awk terminal command.
- Pullpork is used by ELSA as an open source search engine.
- Snort is enabled by default.
Explanation: Security Onion is a Linux distro for intrusion detection, network security monitoring, and log management. It contains many security tools like Snort, Suricata, Bro, and ELSA.
Exam with this question: CCNA Cyber Ops Chapter 12 Exam Answers