Which one of the following is the purpose of the content option, as shown below?

Which one of the following is the purpose of the content option, as shown below?

alert tcp any any -> any any (msg:"Possible exploit"; content: "|90|";)
A . The content option will trigger a drop action when it sees the decimal digit 90.
B . When Snort sees 0x90 in a packet’s payload, it will generate an alert indicating that a possible exploit is occurring.
C . The above Snort rule is not valid and has formatting errors.
D . The above Snort rule should contain a destination IP address to alert the network management server.

View Answer

Answer: B