350-601 Question #293: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. An engineer monitors ingress traffic from Host-A and all traffic for VLAN 20 from Host-B. Which configuration must be implemented to monitor and export traffic to Network Analyzer?

Options

• ASW-1(config)# monitor session 5
• BSW-1(config)# monitor session 5 type erspan-source
• CSW-1(config)# monitor session 5
• DSW-1(config)# monitor session 5 type erspan

Explanation

{"question_number": 10, "question": "An engineer monitors ingress traffic from Host-A and all traffic for VLAN 20 from Host-B and must export traffic to a Network Analyzer. Which configuration must be implemented?", "correct_answer": "B. SW-1(config)# monitor session 5 type erspan-source", "explanation": "Since traffic must be exported to a remote Network Analyzer (implying it crosses a Layer 3 boundary), ERSPAN (Encapsulated Remote SPAN) is required - standard local SPAN cannot forward mirrored traffic across routed networks. The switch performing the capture is the ERSPAN source, so the session type must be 'erspan-source'. This encapsulates the mirrored frames in GRE and forwards them to the remote analyzer's IP address. Options A and C ('monitor session 5' with no type) configure a standard local SPAN session, which cannot reach a remote destination. Option D uses the invalid type keyword 'erspan' - the correct Nexus syntax requires either 'erspan-source' (capturing switch) or 'erspan-destination' (receiving switch), not the generic 'erspan'.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.