CiscoCisco
350-401 · Question #754
350-401 Question #754: Real Exam Question with Answer & Explanation
The correct answer is C: filter access-group 10. To filter ERSPAN session packets to a specific interface or criteria, an access control list must be defined and then applied using the filter access-group command within the monitor session configuration.
Submitted by salim_om· Mar 6, 2026DOMAIN_LIST_MISSING_IN_PROMPT
Question
Refer to the exhibit. Which command filters the ERSPAN session packets only to interface GigabitEthernet1?
Options
- Asource ip 10.10.10.1
- Bsource interface gigabitethernet1 ip 10.10.10.1
- Cfilter access-group 10
- Ddestination ip 10.10.10.1
Explanation
To filter ERSPAN session packets to a specific interface or criteria, an access control list must be defined and then applied using the filter access-group command within the monitor session configuration.
Common mistakes.
- A.
source ipis a command used to specify the source IP for ERSPAN encapsulation, not to filter the monitored traffic based on an interface. - B. The syntax
source interface gigabitethernet1 ip 10.10.10.1is not a valid command for filtering an ERSPAN session to a specific interface. - D.
destination ipis typically used to define the ERSPAN tunnel destination or to specify monitored traffic by destination IP, not to filter by source interface.
Concept tested. ERSPAN session filtering with ACLs
Topics
#ERSPAN#Packet filtering#Cisco IOS configuration
Community Discussion
No community discussion yet for this question.