Firepower Signature Engines

Question 1

AIC

Answer 1

Web traffic analysis

Question 2

Atomic

Answer 2

ARP - layer 2 ARP protocol
IP Advanced - IPv6 Layer 3 and ICMPv6 Layer 4
IP - Layer 4 transport protocols
IPv6 - IOS vulns simulated by malformed IPv6 traffic

Question 3

Fixed

Answer 3

Parallel regex matches - ICMP/TCP/UDP

Question 4

Flood

Answer 4

ICMP and UDP floods

Question 5

Meta

Answer 5

Events that occur in a related manner

Question 6

Multi String

Answer 6

Matches several strings for one signature

Question 7

Normalizer

Answer 7

Enforce RFC compliance

Question 8

Service

Answer 8

Specific protocols

Question 9

State

Answer 9

Stateful searches of strings in protocols

Question 10

String

Answer 10

Matches a regex string based on ICMP/TCP/UDP protocol

Question 11

String XL

Answer 11

Optimized operation of String

Question 12

Sweep

Answer 12

Sweeps from a single host, destination ports, and multiple ports with RPC requests

Question 13

Traffic Anomaly

Answer 13

Inspects TCP/UDP and other traffic for worms

Question 14

Traffic ICMP

Answer 14

Analyzes nonstandard protocols such as TFN2K/LOKI/DDOS

Question 15

Trojan

Answer 15

Analyzes traffic from nonstandard protocols such as BO2K and TFN2K