1. Is Snort an HIDS or an NIDS? 2. How many sensors does Snort use? 3. What does a preprocessor do? 4. Is Snort anomaly-based or signature-based? 5. What kind of file are Snort rules stored in? 6. What kind of file is Snort output (logging info) stored in? 7. Can you use Snort with network switches? With hubs? 8. What operating system(s) does Snort run on?