SNCF — Securing Networks with Firepower — Question 176

Which rule action is only available in Snort 3?

Answer options

• A. Pass
• B. Generate
• C. Alert
• D. Rewrite

Correct answer: D

Explanation

The correct answer is D, Rewrite, as this action is specifically designed for Snort 3 and is not available in previous versions. The other options, Pass, Generate, and Alert, are rule actions that exist in earlier iterations of Snort, making them incorrect in this context.