A Snort Sensor Is Generating Many False-Positive SfPortscan Alerts, in Which

question 60

Multiple Choice

A Snort sensor is generating many false-positive sfPortscan alerts, in which busy, trusted hosts are flagged as the source of port sweep events. Which tuning strategy can mitigate this problem?

• A) Add the host to the Ignore Scanner list.
• B) Add the host to the Ignore Scanned list.
• C) Add the host to the Watch IP list.
• D) Apply a rule threshold.

---

Definitions:

Ultimate Government Authority

The highest level of power or decision-making within a governmental structure, which oversees and guides the functioning of all other levels.

National Level

Pertains to activities or issues that encompass an entire nation, as opposed to local or regional aspects.

Concurrent Powers

Powers in federal systems that are shared by both the state governments and the federal government.

National

Relating to or characteristic of a nation; typically referring to matters that affect a country as a whole.