nerdexam
CiscoCisco

350-401 · Question #1263

350-401 Question #1263: Real Exam Question with Answer & Explanation

The correct answer is A: Define the remote span VLAN on SW1 and SW2.. To capture user traffic on a separate device, Remote SPAN (RSPAN) is the appropriate solution, which requires a dedicated VLAN for transporting mirrored traffic.

Submitted by wei.xz· Mar 6, 2026Network Assurance

Question

Refer to the exhibit. An engineer must send the 172.16.2.0 /24 user traffic to a packet capture tool to troubleshoot an issue. Which action completes the configuration?

Options

  • ADefine the remote span VLAN on SW1 and SW2.
  • BDisable the spanning tree protocol on the monitoring server VLAN.
  • CEncrypt the traffic between the users and the monitoring servers.
  • DEnable the Cisco Discovery Protocol on the server interfaces.

Explanation

To capture user traffic on a separate device, Remote SPAN (RSPAN) is the appropriate solution, which requires a dedicated VLAN for transporting mirrored traffic.

Common mistakes.

  • B. Disabling Spanning Tree Protocol (STP) on any VLAN can lead to Layer 2 loops and network instability, and it is unrelated to the process of mirroring traffic for analysis.
  • C. Encrypting traffic between users and monitoring servers would obscure the packet contents, making it impossible for a packet capture tool to troubleshoot issues effectively.
  • D. Cisco Discovery Protocol (CDP) is used for device discovery and information exchange between directly connected Cisco devices, not for mirroring user traffic to a capture tool.

Concept tested. Remote SPAN (RSPAN) configuration

Reference. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_44_se/configuration/guide/scg/swspan.html

Topics

#RSPAN#Network monitoring#VLAN configuration#Troubleshooting tools

Community Discussion

No community discussion yet for this question.

Full 350-401 PracticeBrowse All 350-401 Questions