GCIA: GIAC Certified Intrusion AnalystDemo

By GIAC · Question Mode

QuestionQ481

Intrusion Detection System Rules

Which statement best characterizes the string-matching method used in signature analysis?

  • A String matching searches specific strings that may indicate an attack.
  • B String matching examines multiple fields from different protocols, such as source address, destination port, or TCP flags.
  • C In string matching, each packet is wrapped in predefined layers of different protocols.
  • D In string matching, an incoming packet is compared, byte by byte, with a single signature, a string of code.
Explanation

String matching searches for specific strings or byte sequences that can indicate a known attack.

Community Discussion

No comments yet. Be the first to start the discussion!