PCNSE · Question #2
Which three fields can be included in a pcap filter? (Choose three)
The correct answer is B. Source IP D. Destination IP E. Ingress interface. In PAN-OS, packet capture (pcap) filters allow administrators to narrow captured traffic to specific flows. The supported filter fields include: Source IP (B), Destination IP (D), Ingress Interface (E), as well as source port and destination port. Egress interface (A) is not a…
Question
Which three fields can be included in a pcap filter? (Choose three)
Exhibit
Options
- AEgress interface
- BSource IP
- CRule number
- DDestination IP
- EIngress interface
How the community answered
(54 responses)- A2% (1)
- B94% (51)
- C4% (2)
Explanation
In PAN-OS, packet capture (pcap) filters allow administrators to narrow captured traffic to specific flows. The supported filter fields include: Source IP (B), Destination IP (D), Ingress Interface (E), as well as source port and destination port. Egress interface (A) is not a supported filter field in PAN-OS packet capture - filters are applied on ingress. Rule number (C) is also not a valid pcap filter field; packet capture operates at the network level, not the policy rule level. Therefore, B, D, and E are the three correct choices.
Topics
Community Discussion
No community discussion yet for this question.