Fantastic research! It really can't be more exactly said ;-). Starting from 05:45 min the author starts mentioning the new rule "REWRITE" within Snort 3.
So, yes, the correct answer here is indeed: (D)
02:25 says 4 are new: pass, drop, reject, rewrite
3:2 = pass: pass
3:2 = drop: NONE
3:2 = reject:reject
3:2 = Rewrite: alert.
so technically it's Drop, but no such option.
Then Rewrite is the only choice
As you can see in the video below, the answer is most likely “D. Rewrite” as you have mentioned. However, since you did not select “D. Rewrite” when commenting, “C. Alert” ended up being the most voted answer.
A, C and D are correct, I think there is a mistake in the question: Which rule action is only available in "Snort 2" and not "snort 3". the rule action witch is available only on snort 2 is Generate (B)
That is incorrect. Both "Pass" and "Rewrite" are snort 3 rules. "Rewrite" in snort 3 is the equivalent of "Alert" in snort 2. Rewrite only exists in snort 3, not in snort 2. I posted a link to a "Cisco" Youtube video in my other comment. At 5:45 in the video, they literally show a slide explaining snort 2 and snort 3 rules.
upvoted 5 times
...
...
This section is not available anymore. Please use the main Exam Page.300-710 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
aaInman
Highly Voted 1 year, 4 months agoMB2222
1 year agowhysohardwhy
2 months, 2 weeks agod0980cc
Most Recent 1 month, 3 weeks agoCCNPTARO
3 months, 2 weeks agohouhou12322
7 months, 3 weeks agoTodaniTE
1 year, 3 months agoaaInman
1 year, 2 months ago