Cisco
300-710 · Question #319
Which rule action is only available in Snort 3?
The correct answer is D. Rewrite. Rewrite is a new rule action introduced in Snort 3 that allows modification of packet contents inline, such as rewriting headers or payloads, which was not possible in Snort 2.x. Pass, Generate, and Alert are traditional Snort rule actions available in both Snort 2.x and Snort
Configuration
Question
Which rule action is only available in Snort 3?
Options
- APass
- BGenerate
- CAlert
- DRewrite
How the community answered
(45 responses)- A2% (1)
- C2% (1)
- D96% (43)
Explanation
Rewrite is a new rule action introduced in Snort 3 that allows modification of packet contents inline, such as rewriting headers or payloads, which was not possible in Snort 2.x. Pass, Generate, and Alert are traditional Snort rule actions available in both Snort 2.x and Snort
Topics
#Snort 3#Rule actions#IPS configuration#Packet manipulation
Community Discussion
No community discussion yet for this question.