nerdexam
Cisco

200-201 · Question #464

An engineer configured regular expression ".*\.([Dd][Oo][Cc]|[Xx][LI][Ss]|[Pp][Pp][Tt]) HTTP/1.[01]" on Cisco ASA firewall. What does this regular expression do?

The correct answer is C. It captures Word, Excel, and PowerPoint files in HTTP v1.0 and v1.1. The regular expression pattern captures file extensions like .doc, .xls, and .ppt (or variations in letter case, such as DOC, XLS, PPT) within HTTP traffic sessions, as indicated by the ".([Dd][Oo][Cc]|[Xx][LI][Ss]|[Pp][Pp][Tt])" part of the regex. Additionally, it specifies…

Submitted by manish99· Mar 6, 2026Network Intrusion Analysis

Question

An engineer configured regular expression ".*.([Dd][Oo][Cc]|[Xx][LI][Ss]|[Pp][Pp][Tt]) HTTP/1.[01]" on Cisco ASA firewall. What does this regular expression do?

Options

  • AIt captures .doc, .xls, and .pdf files in HTTP v1.0 and v1.1.
  • BIt captures documents in an HTTP network session.
  • CIt captures Word, Excel, and PowerPoint files in HTTP v1.0 and v1.1.
  • DIt captures .doc, .xls, and .ppt files extensions in HTTP v1.0.

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    84% (21)
  • D
    4% (1)

Explanation

The regular expression pattern captures file extensions like .doc, .xls, and .ppt (or variations in letter case, such as DOC, XLS, PPT) within HTTP traffic sessions, as indicated by the ".([Dd][Oo][Cc]|[Xx][LI][Ss]|[Pp][Pp][Tt])" part of the regex. Additionally, it specifies HTTP versions 1.0 and 1.1 by ending with " HTTP/1.[01]" to focus the matching on HTTP sessions using these

Topics

#Regular Expressions#Cisco ASA#HTTP Filtering#File Extensions

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice