Which Cisco Firepower rule action displays an HTTP warning page?

In a Cisco AMP for Networks deployment, which disposition is returned if the cloud cannot be reached?

What is a valid Cisco AMP file disposition?

An engineer must investigate a connectivity issue and decides to use the packet capture feature on Cisco FTD. The goal is to see the real packet going through the Cisco FTD device and see the Snort detection actions as a part of the output. After the capture-traffic command is issued, only the packets are displayed. Which action resolves this issue?

In which two places can thresholding settings be configured? (Choose two.)