nerdexam
Cisco

200-155 · Question #47

Which statements are valid for a local SPAN configuration? (Choose two.)

The correct answer is A. Source and destination interface must be on the same host D. Destination interface can be a physical port. For a local SPAN configuration, both the source and destination interfaces must reside on the same network device, and the destination can be a physical port to capture traffic.

Network Services

Question

Which statements are valid for a local SPAN configuration? (Choose two.)

Options

  • ASource and destination interface must be on the same host
  • BSource and destination interfaces can be on different hosts
  • CDestination vEthernet interface can be on a different VLAN than the source
  • DDestination interface can be a physical port
  • EDestination interface cannot be a physical port

How the community answered

(19 responses)
  • A
    95% (18)
  • C
    5% (1)

Why each option

For a local SPAN configuration, both the source and destination interfaces must reside on the same network device, and the destination can be a physical port to capture traffic.

ASource and destination interface must be on the same hostCorrect

In a local SPAN (Switched Port Analyzer) configuration, the monitoring occurs on a single switch, meaning both the source interface (being monitored) and the destination interface (where captured traffic is sent) must exist on that same switch.

BSource and destination interfaces can be on different hosts

The statement "Source and destination interfaces can be on different hosts" describes a Remote SPAN (RSPAN) or Encapsulated Remote SPAN (ERSPAN) configuration, not a local SPAN.

CDestination vEthernet interface can be on a different VLAN than the source

While a destination vEthernet interface might exist in some virtualized environments, the general rule for local SPAN is that the destination port is usually a physical port and not necessarily on a different VLAN than the source.

DDestination interface can be a physical portCorrect

A destination interface in a SPAN configuration can be any physical port on the switch, typically connected to a network analyzer or intrusion detection system, to receive the mirrored traffic.

EDestination interface cannot be a physical port

This contradicts option D and is incorrect; destination interfaces for local SPAN are commonly physical ports.

Concept tested: Local SPAN configuration characteristics

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_44_se/configuration/guide/scg/swspan.html

Topics

#SPAN#port mirroring#network monitoring

Community Discussion

No community discussion yet for this question.

Full 200-155 Practice