Exam 300-710 topic 1 question 104 discussion

A is a correct answer.

To confirm that traffic is reaching the firewall when an administrator is unable to connect via SSH, the best option is: A. by performing a packet capture on the firewall Performing a packet capture on the firewall allows the administrator to see if the SSH traffic is reaching the firewall and how it is being processed. This can help identify any issues with traffic flow or firewall rules that might be blocking the connection12.

Basically if you want to ensure traffic pass or hit any firewall policy, you'll check packet tracer first.

My target is to make sure the traffic is "reaching" the firewall, NOT pass through the firewall. To make sure the traffic can successfully reach me, i.e. no routing issue, we should use packet capture on the outside interface

Key part here is 'packet reaching the firewall'. This can only be done with a capture. -> A

A: packet capture is to see real traffic through the FW b: could be the first option for a junior, but after that, they would go to option A c: wireshark doesn't give any answer about the traffic reaching the firewall, only leaving the host d: packet tracer only work in this case if you want to see if the routes and rules are properly configured

Correct answer is: A

Packet Capture will show packets arriving to the interface on FW

A is the right one

packet tracer is a simulation of a packet flowing through the device. Packet Capture is correct answer.

The correct answer is A.

Packet Tracer will not show that packet comes to FTD. We need to capture relevant traffic.