Exam 300-710 topic 1 question 324 discussion

Actual exam question from Cisco's 300-710

Question #: 324
Topic #: 1

Network users experience issues when accessing a server on a different network segment. An engineer investigates the issue by performing packet capture on Cisco Secure Firewall Threat Defense. The engineer expects more data and suspects that not all the traffic was collected during a 15-minute capture session. Which action must the engineer take to resolve the issue?

A. Forward the captured data to an FTP server.
B. Increase the amount of RAM allocated for the capture.
C. Ensure that the allocated memory is sufficient.
D. Provide a file name to save the data.

Show Suggested Answer

Suggested Answer: C 🗳️

by d0980cc at March 19, 2025, 12:14 p.m.

Comments

Submit Cancel

d0980cc

3 months ago

Selected Answer: A

If this is a standalone FTD, there isn't a direct command to "allocate memory" specifically for a packet capture. Instead, memory usage is implicitly controlled by the parameters you set for the capture, such as the buffer size, packet count, or file size limits. The system allocates resources based on these settings within its available memory constraints. To forward the captured data to an FTP server: > system support diagnostic-cli firepower> enable firepower# firepower# capture CAP1 interface INSIDE match ip host 192.168.1.10 any firepower# copy /pcap capture:CAP1 ftp://<username>:<password>@<ftp-server-ip>/<filename>.pcap I choose (A)

upvoted 1 times

Pierre_Bouvier

3 weeks, 5 days ago

You're right about the FTP and how it's used to offload PCAPs from the device to avoid using up internal space. But exporting via FTP only helps after the data is already captured.

upvoted 1 times

...

d0980cc

2 months ago

True, there is not an "allocate memory" but there is a "buffer" command that increase the size from 500KB to 32MB, and there's another command that can be used for higher volume captures up to 10GB (file-size). Change my mind, C.

upvoted 2 times

...