Go back to EX0-106 - SCNS Tactical Perimeter Defense

Question :-

You are configuring your new IDS machine, where you have recently installed Snort. While you are working with this machine, you wish to create some basic rules to test the ability to log traffic as you desire. Which of the following Snort rules will log any tcp traffic from any IP address to any port between 1 and 1024 on any host in the 10.0.10.0/24 network?
log tcp 0.0.0.0/24 -> 10.0.10.0/24 1<>1024
log tcp any any -> 10.0.10.0/24 1<>1024
log tcp any any -> 10.0.10.0/24 1:1024
log tcp 0.0.0.0/24 -> 10.0.10.0/24 1:1024
log udp any any -> 10.0.10.0/24 1:1024

Want to practice for EX0-106 - SCNS Tactical Perimeter Defense ? Click here.