Jon is explaining how the inspection module works to a colleague. If a new connection passes
through the inspection module and the packet matches the rule, what is the next step in the
process?
A.
Verify if another rule exists.
B.
Verify if any logging or alerts are defined.
C.
Verify if the packet should be moved through the TCP/IP stack.
D.
Verify if the packet should be rejected.
B
0
0
If you think about it, if a packet goes to an inspection module it means that packet is accepted. Hence we can eliminate D
A of course is not true since packet already matched a rule
and lastly C doesnt make sense
So by elimination it’s B
0
0
I learned: logging before action (before accept, drop …)
0
0
B. Verify if any logging or alerts are defined.
0
0