ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 350-601 All Questions

View all questions & answers for the 350-601 exam
Go to Exam

Exam 350-601 topic 1 question 473 discussion

Actual exam question from Cisco's 350-601
Question #: 473
Topic #: 1
[All 350-601 Questions]



Refer to the exhibit. An engineer reported suspicious behavior in a server farm that is deployed on the 198.19.1.0/24 subnet. The traffic must be captured only from the server with the IP address of 198.19.1.19/24. The traffic analyzer is connected to the same switch as the server farm. Which configuration set captures the traffic?

  • A. switch(config)# ip access-list match_Server_pkts
    switch(config-acl)# permit ip 198.19.1.19 0.0.0.0 any
    switch(config)# monitor session 1
    switch(config-monitor)# filter access-group span_filter
  • B. switch(config)# ip access-list match_Server_pkts
    switch(config-acl)# permit ip 198.19.1.19 0.0.0.0 any
    switch(config)# monitor session 1
    switch(config-monitor)# filter access-group 5
  • C. switch(config)# ip access-list match_Server_pkts
    switch(config-acl)# permit ip 198.19.1.19 255.255.255.255 any switch(config)# monitor session 1 switch(config-monitor)# filter access-group span_filter
  • D. switch(config)# ip access-list match_Server_pkts
    switch(config-acl)# permit ip 198.19.1.19 255.255.255.0 any
    switch(config)# monitor session 1
    switch(config-monitor)# filter access-group span_filter
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by VTi at Jan. 30, 2024, 3:23 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Racktoor
1 month ago
Selected Answer: C
What you all seem to be missing is the netmask. Only option C has a hostmask /32. Every other option has no mask or the whole subnet.
upvoted 1 times
Gopz28
19 hours, 36 minutes ago
in cisco access-lists you had to use the wildcard mask which is reverse to the subnet mask. example subnet mask 255.255.255.255 is specified as 0.0.0.0 in wildcard which is to match a host ip.
upvoted 1 times
Gopz28
19 hours, 35 minutes ago
Hence answer A is right
upvoted 1 times
...
...
...
Rollizo
4 months ago
Selected Answer: A
it is A Configuration Example for a SPAN ACL This example shows how to configure a SPAN ACL: switch# configure terminal switch(config)# ip access-list match_11_pkts switch(config-acl)# permit ip 11.0.0.0 0.255.255.255 any switch(config-acl)# exit switch(config)# ip access-list match_12_pkts switch(config-acl)# permit ip 12.0.0.0 0.255.255.255 any switch(config-acl)# exit switch(config)# vlan access-map span_filter 5 switch(config-access-map)# match ip address match_11_pkts switch(config-access-map)# action forward switch(config-access-map)# exit switch(config)# vlan access-map span_filter 10 switch(config-access-map)# match ip address match_12_pkts switch(config-access-map)# action forward switch(config-access-map)# exit switch(config)# monitor session 1 switch(config-erspan-src)# filter access_group span_filter
upvoted 1 times
...
GoForCCNP
7 months, 3 weeks ago
Selected Answer: A
Correct is A
upvoted 1 times
...
timeforexam
9 months, 2 weeks ago
Selected Answer: A
suppose to be A
upvoted 2 times
...
crooks_1988
9 months, 2 weeks ago
Agree with A, also D is using a subnet mask and not a wilcard
upvoted 1 times
...
VTi
10 months, 2 weeks ago
Selected Answer: A
Answer is A. The traffic must be captured only from the server... not from entire subnet.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago