Exam 350-601 topic 1 question 473 discussion

Actual exam question from Cisco's 350-601

Question #: 473
Topic #: 1

Refer to the exhibit. An engineer reported suspicious behavior in a server farm that is deployed on the 198.19.1.0/24 subnet. The traffic must be captured only from the server with the IP address of 198.19.1.19/24. The traffic analyzer is connected to the same switch as the server farm. Which configuration set captures the traffic?

A. switch(config)# ip access-list match_Server_pkts
switch(config-acl)# permit ip 198.19.1.19 0.0.0.0 any
switch(config)# monitor session 1
switch(config-monitor)# filter access-group span_filter
B. switch(config)# ip access-list match_Server_pkts
switch(config-acl)# permit ip 198.19.1.19 0.0.0.0 any
switch(config)# monitor session 1
switch(config-monitor)# filter access-group 5
C. switch(config)# ip access-list match_Server_pkts
switch(config-acl)# permit ip 198.19.1.19 255.255.255.255 any switch(config)# monitor session 1 switch(config-monitor)# filter access-group span_filter
D. switch(config)# ip access-list match_Server_pkts
switch(config-acl)# permit ip 198.19.1.19 255.255.255.0 any
switch(config)# monitor session 1
switch(config-monitor)# filter access-group span_filter

Show Suggested Answer

Suggested Answer: A 🗳️

by VTi at Jan. 30, 2024, 3:23 p.m.

Comments

Submit Cancel

Racktoor

7 months, 2 weeks ago

Selected Answer: C

What you all seem to be missing is the netmask. Only option C has a hostmask /32. Every other option has no mask or the whole subnet.

upvoted 1 times

Gopz28

6 months, 1 week ago

in cisco access-lists you had to use the wildcard mask which is reverse to the subnet mask. example subnet mask 255.255.255.255 is specified as 0.0.0.0 in wildcard which is to match a host ip.

upvoted 2 times

Gopz28

6 months, 1 week ago

Hence answer A is right

upvoted 1 times

...

Rollizo

10 months, 2 weeks ago

Selected Answer: A

it is A Configuration Example for a SPAN ACL This example shows how to configure a SPAN ACL: switch# configure terminal switch(config)# ip access-list match_11_pkts switch(config-acl)# permit ip 11.0.0.0 0.255.255.255 any switch(config-acl)# exit switch(config)# ip access-list match_12_pkts switch(config-acl)# permit ip 12.0.0.0 0.255.255.255 any switch(config-acl)# exit switch(config)# vlan access-map span_filter 5 switch(config-access-map)# match ip address match_11_pkts switch(config-access-map)# action forward switch(config-access-map)# exit switch(config)# vlan access-map span_filter 10 switch(config-access-map)# match ip address match_12_pkts switch(config-access-map)# action forward switch(config-access-map)# exit switch(config)# monitor session 1 switch(config-erspan-src)# filter access_group span_filter

upvoted 1 times

...