An engineer configures monitoring on SW1 and enters the show command to verify operation. What does the output confirm?

Question

Exhibits

Options

• ASPAN session 1 monitors activity on VLAN 50 of a remote switch
• BSPAN session 2 only monitors egress traffic exiting port FastEthernet 0/14.
• CSPAN session 2 monitors all traffic entering and exiting port FastEthernet 0/15.
• DRSPAN session 1 is incompletely configured for monitoring

• A
  2% (1)
• B
  5% (2)
• C
  12% (5)
• D
  81% (34)

Explanation

Explanation

Option D is correct because RSPAN (Remote SPAN) requires both a source session and a destination session to be fully operational - if the output shows an RSPAN session configured with only a source or only a destination (missing the other component), the session is incomplete and non-functional. A properly configured RSPAN session must define the RSPAN VLAN, a source, and a destination across the involved switches.

Option A is wrong because a standard SPAN session monitors ports or VLANs locally on the same switch; monitoring activity on a remote switch's VLAN requires RSPAN, and the session described doesn't confirm full RSPAN functionality. Option B is wrong because SPAN session 2 in the output typically shows both ingress and egress monitoring unless explicitly restricted, and the output doesn't support an egress-only claim on Fa0/14. Option C is wrong because the monitoring is on Fa0/14, not Fa0/15 - a classic trap using similar port numbers to catch careless readers.

Memory Tip: For RSPAN questions, remember "R = Remote = Requires Both Ends" - always look for a source session and a destination session. If either is missing from the output, the configuration is incomplete, making D the telltale answer.

No community discussion yet for this question.