EXIN Exam Questions

Which of the following Snort rules will log any tcp traffic from any host other than 172.16.40.50 us

You are configuring your new IDS machine, where you have recently installed Snort. While you
are working with this machine, you wish to create some basic rules to test the ability to log traffic
as you desire. Which of the following Snort rules will log any tcp traffic from any host other than
172.16.40.50 using any port, to any host in the 10.0.10.0/24 network using any port?

A.
logudp ! 172.16.40.50/32 any -> 10.0.10.0/24 any

B.
logtcp ! 172.16.40.50/32 any -> 10.0.10.0/24 any

C.
logudp ! 172.16.40.50/32 any <> 10.0.10.0/24 any

D.
logtcp ! 172.16.40.50/32 any <> 10.0.10.0/24 any

E.
logtcp ! 172.16.40.50/32 any <- 10.0.10.0/24 any