Which tool can perform real-time traffic and port analysis, and can also detect port scans, fingerprinting and buffer overflow attacks?

Which tool can perform real-time traffic and port analysis, and can also detect port scans, fingerprinting and buffer overflow attacks?

• SIEM
• Nmap
• Snort
• Netflow

Explanation: Snort is an open source intrusion protection system (IPS) that is capable of performing real-time traffic and port analysis, packet logging, content searching and matching, as well as detecting probes, attacks, port scans, fingerprinting, and buffer overflow attacks.

Exam with this question: Modules 11 - 12: Intrusion Prevention Group Exam Answers
Exam with this question: Introduction to Cybersecurity Chapter 4 Quiz