When packet capture is used on a Cisco Secure Firewall Threat Defense device and the packet flow is waiting on the malware query, which Snort verdict appears?

The correct answer is B. retry. When packet capture is used on a Cisco Secure Firewall Threat Defense (FTD) device and the packet flow is waiting on the malware query, the Snort verdict appears as "retry." This indicates that the device is still processing the malware analysis and has not yet determined the…

Management and Troubleshooting

Question

Options

Ablock
Bretry
Creplace
Dblockflow

How the community answered

(23 responses)

A
4% (1)
B
87% (20)
C
9% (2)

Explanation

When packet capture is used on a Cisco Secure Firewall Threat Defense (FTD) device and the packet flow is waiting on the malware query, the Snort verdict appears as "retry." This indicates that the device is still processing the malware analysis and has not yet determined the final action The "retry" verdict signifies that the packet is in a holding state while awaiting the result of the malware inspection, which helps in maintaining the security posture until a definitive decision is

Topics

#Cisco FTD#Snort Verdicts#Malware Inspection#Packet Capture

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice