Which tool can perform real-time traffic and port analysis, and can also detect port scans, fingerprinting and buffer overflow attacks?
- SIEM
- Nmap
- Snort
- Netflow
Explanation: Snort is an open source intrusion protection system (IPS) that is capable of performing real-time traffic and port analysis, packet logging, content searching and matching, as well as detecting probes, attacks, port scans, fingerprinting, and buffer overflow attacks.
Exam with this question: Modules 11 - 12: Intrusion Prevention Group Exam Answers
Exam with this question: Introduction to Cybersecurity Chapter 4 Quiz
Please login or Register to submit your answer