nerdexam
Cisco

300-710 · Question #294

An engineer is configuring a custom application detector for HTTP traffic and wants to import a file that was provided by a third party. Which type of flies are advanced application detectors…

The correct answer is C. LUA script. Advanced application detectors in Cisco FTD for custom application detection are created and uploaded as LUA scripts.

Configuration

Question

An engineer is configuring a custom application detector for HTTP traffic and wants to import a file that was provided by a third party. Which type of flies are advanced application detectors creates and uploaded as?

Options

  • APerl script
  • BNBAR protocol
  • CLUA script
  • DPython program

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    87% (26)
  • D
    7% (2)

Why each option

Advanced application detectors in Cisco FTD for custom application detection are created and uploaded as LUA scripts.

APerl script

Perl scripts are not the format used for custom application detectors in FTD.

BNBAR protocol

NBAR (Network-Based Application Recognition) is a Cisco technology for application recognition, but it's a built-in feature/engine, not a file type for custom detectors.

CLUA scriptCorrect

Cisco Firepower Threat Defense (FTD) uses Lua scripts for advanced custom application detection. These scripts define patterns and logic to identify specific applications or protocols that are not recognized by the standard application detectors, allowing for flexible and granular traffic classification.

DPython program

Python programs are not the format used for custom application detectors in FTD.

Concept tested: FTD custom application detector script type

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/650/configuration/guide/fpmc-config-guide-v65/fpmc-policies.html#concept_D8E53EC8663E480EAA84620A07B37B24

Topics

#NBAR2#Custom Application Detection#LUA Scripts#Application Recognition

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice