350-601 Question #677: Real Exam Question with Answer & Explanation

Question

An engineer must analyze packets arriving from a server port on a Cisco Nexus 9000 Series Switch. The packet sniffer is located on a different switch from the one the server is currently connected to. The packet capture must meet these requirements: - It must capture all incoming packets on the switch port. - It must capture the first 1000 bytes of the packet to conserve bandwidth. Which action must be taken to meet these requirements?

Options

• AEnable the MTU size of 1000.
• BConfigure the marker-packet to 1000.
• CImplement an ACL with the packet-length of 1000.
• DSet rate-limiting to 1000.

Explanation

On Cisco Nexus 9000 Series Switches, when using ERSPAN (Encapsulated Remote SPAN) to capture traffic across switches, you can limit the size of the mirrored (sniffed) packet using the marker-packet configuration. Setting marker-packet 1000 ensures that only the first 1000 bytes of each packet are mirrored, which helps conserve bandwidth while still capturing relevant header and partial payload information. MTU size controls the maximum transmission unit, not the SPAN capture size. ACL with packet- length is used for filtering, not for SPAN capture byte limits. Rate-limiting limits traffic throughput, not capture size.

No community discussion yet for this question.