C$)$ Include the command used to set the requested permission with a very brief description showing your understanding.Question $4$: Consider the following Snort rule:

kalinkati: $ mousepad$/$etc$/$snort$/$snort$.$conf

File Edit Search View Document Help

alert tcp any any $$ any any $($msg:"Possible exploit";

content:"$|90|"$; offset:$40$; depth:$75"$; $)$

a$)$ What type of connection this rule is applied to$?($include protocol name$)$

b$)$ What traffic is monitored? $($include source, destination, ports, and directions$)$

c$)$ Any additional requirement$/$characteristics in the traffic that the rule looks for?

d$)$ What happens when the rule is matched? $($include action$)$

SIT$182-$ Real World Practices for Cyber

Security

$($see next page$)$

Question $5$: Consider the following Snort rule: