Exam 300-710 topic 1 question 199 discussion

Actual exam question from Cisco's 300-710

Question #: 199
Topic #: 1

An engineer wants to perform a packet capture on the Cisco FTD to confirm that the host using IP address 192.168.100.100 has the MAC address of 1234.5678.901 to help troubleshoot a connectivity issue. What is the correct tcpdump command syntax to ensure that the MAC address appears in the packet capture output?

A. -w capture.pcap -s 1518 host 192.168.100.100 ether
B. -w capture.pcap -s 1518 host 192.168.100.100 mac
C. -nm src 192.168.100.100
D. -ne src 192.168.100.100

Show Suggested Answer

Suggested Answer: D 🗳️

by Baumb at Feb. 12, 2023, 1:49 p.m.

Comments

Submit Cancel

Bbb78

8 months, 2 weeks ago

D is correct - but I have never saw anybody use this function in FTD. Usualy I do captures in LINA not FTD CLI

upvoted 2 times

...

DID123

11 months, 4 weeks ago

Selected Answer: D

D is correct, check the link below: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212474-working-with-firepower-threat-defense-f.html#:~:text=In%20order%20to%20capture%20Src%20IP%20%3D%20192.168.101.1%20and%20see,Options%3A%20%2Dne%20src%20192.168.101.1

upvoted 3 times

...

Baumb

12 months ago

D is correct, see: https://www.cisco.com/c/de_de/support/docs/security/firepower-ngfw/212474-working-with-firepower-threat-defense-f.html#:~:text=Um%20Src%20IP%20%3D%20192.168.101.1%20zu,Options%3A%20%2Dne%20src%20192.168.101.1

upvoted 2 times

...