ACE-A1.2 Exam QuestionsBrowse all questions from this exam

ACE-A1.2 Exam - Question 14


Given the following output, on what interface would you expect to see mirrored traffic when using tcpdump?

Show Answer
Correct Answer: D

In the given output, the monitor session 'Lab' shows that the source port is 'Et1' and the destination port is 'Cpu: active (mirror0)'. This indicates that the traffic from the 'Et1' interface is being mirrored to the 'mirror0' interface. To capture the mirrored traffic using tcpdump, you would need to use the 'mirror0' interface.

Discussion

2 comments
Sign in to comment
shanOption: D
Apr 14, 2020

Answer is D; 7150S#bash tcpdump -i mirror0 tcpdump: WARNING: mirror0: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on mirror0, link-type EN10MB (Ethernet), capture size 65535 bytes

network_guruOption: D
Jan 29, 2021

It says source ports are Eth1. Destination is CPU (mirror0). The answer is not A or B or C.. it is D!