Which of the following methods can be used to deactivate a rule in Snort?

Which of the following methods can be used to deactivate a rule in Snort? (Select TWO correct
answers)

Which of the following methods can be used to deactivate a rule in Snort? (Select TWO correct
answers)

A.
Place a # in front of the rule and restart snort.

B.
Write a pass rule in local.rules and restart snort with the o option.

C.
Delete the rule and snort will automatically reread its rules files within five minutes.

D.
Add the rule to /etc/snort/rules.deactivated and it will take effect immediately.



Leave a Reply 0

Your email address will not be published. Required fields are marked *