An engineer has been tasked with configuring a Cisco FTD to analyze protocol fields and detect anomalies in the traffic from industrial systems. What must be done to meet these requirements?

The correct answer is C. Configure intrusion rules for the DNP3 preprocessor. DNP3 is a SCADA Protocol which in turn is widly used in the industrial network world. The DNP3 preprocessor detects anomalies in DNP3 traffic and decodes the DNP3 protocol for processing by the rules engine, which uses DNP3 keywords to access certain protocol fields. guide-v63/sc

Submitted by lars.no· Mar 30, 2026Network Security

Question

Options

AImplement pre-filter policies for the CIP preprocessor
BEnable traffic analysis in the Cisco FTD
CConfigure intrusion rules for the DNP3 preprocessor
DModify the access control policy to trust the industrial traffic

How the community answered

(26 responses)

A
12% (3)
B
4% (1)
C
81% (21)
D
4% (1)

Explanation

DNP3 is a SCADA Protocol which in turn is widly used in the industrial network world. The DNP3 preprocessor detects anomalies in DNP3 traffic and decodes the DNP3 protocol for processing by the rules engine, which uses DNP3 keywords to access certain protocol fields. guide-v63/scada_preprocessors.html

Topics

#Cisco FTD#ICS/SCADA security#Protocol anomaly detection#DNP3 preprocessor

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice