Question 1

The well-known UDP port number for syslog is:

80

22

514

53

Question 2

When configuring network firewall logging functionality, the decision to log blocked connections, allowed connections, or both blocked and allowed connections is usually driven by organizational security requirements.

True

False

Question 3

When is it desirable to configure Snort to copy intrusion detection alerts to the pfSense system log?

A. When the pfSense firewall is forwarding log data to external systems

B. When the pfSense firewall doesn't have to process log data

C. When Snort logs can't need to be saved

D. All of these

Question 4

When monitoring a network with multiple subnets, Snort should be configured to use the same rulesets on each subnet to ensure consistency and stability.

True

False

Question 5

Zenmap is a graphical user interface for the popular Nmap (network mapper) software application.

True

False