nerdexam
Cisco

350-401 · Question #1039

Refer to the exhibit. A network engineer issues the debug command while troubleshooting a network issue. What does the output confirm?

The correct answer is D. ACL100 is tracking ICMP traffic from 1.1.1.1 destined for 10.1.1.1.. The debug ip icmp command displays information about ICMP packets and, when combined with ACL logging, can confirm specific traffic flows evaluated by an ACL.

Submitted by tom_us· Mar 6, 2026Network Assurance

Question

Refer to the exhibit. A network engineer issues the debug command while troubleshooting a network issue. What does the output confirm?

Exhibits

350-401 question #1039 exhibit 1
350-401 question #1039 exhibit 2

Options

  • AACL 100 is tracking ICMP traffic from 10.1.1.1 destined for 1.1.1.1.
  • BACL100 is tracking all traffic from 10.1.1.1 destined for 1.1.1.1.
  • CACL100 is tracking ICMP traffic from Serial1/0 destined for Serial3/0.
  • DACL100 is tracking ICMP traffic from 1.1.1.1 destined for 10.1.1.1.

How the community answered

(35 responses)
  • A
    9% (3)
  • B
    17% (6)
  • C
    6% (2)
  • D
    69% (24)

Why each option

The `debug ip icmp` command displays information about ICMP packets and, when combined with ACL logging, can confirm specific traffic flows evaluated by an ACL.

AACL 100 is tracking ICMP traffic from 10.1.1.1 destined for 1.1.1.1.

Without the exhibit, it's impossible to confirm the specific direction or source/destination, but this option implies a different traffic flow than the correct answer.

BACL100 is tracking all traffic from 10.1.1.1 destined for 1.1.1.1.

ACL100 would typically track specific types of traffic based on its configuration, not 'all traffic' between two hosts, especially with `debug ip icmp` only showing ICMP.

CACL100 is tracking ICMP traffic from Serial1/0 destined for Serial3/0.

ACLs track IP addresses, not interfaces like Serial1/0 or Serial3/0, although traffic might traverse those interfaces. The debug output would show IP addresses.

DACL100 is tracking ICMP traffic from 1.1.1.1 destined for 10.1.1.1.Correct

The `debug ip icmp` command captures and displays details about ICMP packets (such as pings) as they are processed by the router. If the debug output includes information about `ACL100` specifically tracking ICMP packets originating from `1.1.1.1` and destined for `10.1.1.1`, then this statement is confirmed.

Concept tested: Debugging ICMP and ACLs

Source: https://www.cisco.com/c/en/us/td/docs/ios/12_2/debug/command/reference/drfioscr.html

Topics

#debug command#ACL#ICMP#traffic direction analysis

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice