SPAN Flashcards
How can the traffic that is mirrored out the GigabitEthernet0/48 port be limited to only traffic
that is received or transmitted in VLAN 10 on the GigabitEthernet0/1 port?
A. Change the configuration for GigabitEthernet0/48 so that it is a member of VLAN 10.
B. Add an access list to GigabitEthernet0/48 to filter out traffic that is not in VLAN 10.
C. Apply the monitor session filter globally to allow only traffic from VLAN 10.
D. Change the monitor session source to VLAN 10 instead of the physical interface.
C. Apply the monitor session filter globally to allow only traffic from VLAN 10.
–tricky–
Explanation:
We can add the “monitor session 1 filter vlan 10” command to limit monitored traffic from VLAN 10 only.
A network engineer wants to analyze all incoming and outgoing packets for an interface that is connected to an access switch. Which three items must be configured to mirror traffic to a packet sniffer that is connected to the distribution switch? (Choose three)
A. A monitor session on the distribution switch with a physical interface as the source and the remote SPAN VLAN as the destination
B. A remote SPAN VLAN on the distribution and access layer switch
C. A monitor session on the access switch with a physical interface source and the remote SPAN VLAN as the destination
D. A monitor session on the distribution switch with a remote SPAN VLAN as the source and physical interface as the destination
E. A monitor session on the access switch with a remote SPAN VLAN source and the physical interface as the destination
F. A monitor session on the distribution switch with a physical interface as the source and a physical interface as the destination
B. A remote SPAN VLAN on the distribution and access layer switch
C. A monitor session on the access switch with a physical interface source and the remote SPAN VLAN as the destination
D. A monitor session on the distribution switch with a remote SPAN VLAN as the source and physical interface as the destination
monitor session 2 filter vlan 1 – 8, 39, 52
—
What is the result of the implemented command?
A. All VLAN traffic is sent to the SPAN destination interface.
B. Traffic from VLAN 4 is not sent to the SPAN destination interface.
C. Filtering a trunked SPAN port effectively disables SPAN operations for all VLANs.
D. The trunk’s native VLAN must be changed to something other than VLAN 1.
E. Traffic from VLANs 1 to 8, 39, and 52 is replicated to the SPAN destination port.
E. Traffic from VLANs 1 to 8, 39, and 52 is replicated to the SPAN destination port.
A network engineer investigates a recent network failure and notices that one of the interfaces
on the switch is still down. What is causing the line protocol on this interface to be shown as
down?
—
GigabitEthernet0/23 is up, Line Protocol is down (monitoring)
—
A. There is a layer 1 physical issue.
B. There is a speed mismatch on the interface.
C. The interface is configured as the target of the SPAN session.
D. The interface is configured as the source of the SPAN session.
E. There is a duplex mismatch on the interface.
C. The interface is configured as the target of the SPAN session.
RSPAN has been configured on a Cisco Catalyst switch; however, traffic is not being replicated to the remote switch. Which type of misconfiguration is a cause?
A. The local switch is overloaded with the amount of sourced traffic that must be replicated to the remote switch.
B. The RSPAN designated VLAN is missing the remote span command.
C. The local and remote RSPAN switches are configured using different session IDs.
D. The local RSPAN switch is replicating only Rx traffic to the remote switch.
B. The RSPAN designated VLAN is missing the remote span command.
monitor session 1 source interface g0/4 rx
monitor session 1 filter vlan 3
monitor session 1 destination interface g0/5
—
A. Configure a SPAN session to monitor the received traffic on interface g0/4 only for VLAN 3
B. Configure a SPAN session to monitor the received traffic on interface g0/5 only for VLAN 3
C. Configure a SPAN session to monitor the received traffic on interface g0/5 for all VLANs except VLAN 3
D. Configure a SPAN session to monitor the received traffic on interface g0/4 for all VLANs except VLAN 3
A. Configure a SPAN session to monitor the received traffic on interface g0/4 only for VLAN 3
Which two statements about SPAN source and destination ports during an active session are true? (Choose two)
A. The source port can be only an Ethernet physical port.
B. The source port can be monitored in multiple SPAN sessions.
C. The destination port can be destination in multiple SPAN sessions.
D. The destination port does not participate in STP.
E. You can mix individual source ports and source VLANs within a single session.
B. The source port can be monitored in multiple SPAN sessions.
D. The destination port does not participate in STP.
Which statement about frame SPAN is true?
A. Destination and source port SPAN works on L2 (Layer 2)
B. Source ports SPAN work on L2 (Layer 2)
C. Destination ports SPAN work on L2 (Layer 2)
D. Destination and source port SPAN don’t work on L2
A. Destination and source port SPAN works on L2 (Layer 2)
A physical switch port is part of an EtherChannel group. What happens while the same port configured as a SPAN destination?
A. The port forwards traffic in the EtherChannel group and acts as a SPAN source simultaneously.
B. The port is removed from the EtherChannel group.
C. The port is put in the errdisabled state and can only be reenabled manually.
D. The operation is not allowed as an EtherChannel member cannot be a SPAN source port.
B. The port is removed from the EtherChannel group.
Which option is a Cisco recommended RSPAN configuration practice?
A. Use a different RSPAN VLAN for each session if configuring RSPAN on multiple switches.
B. Use only one destination port for each RSPAN session.
C. Define an RSPAN VLAN before configuring an RSPAN source or destination session.
D. Assign access ports to an RSPAN VLAN like any other campus VLAN
C. Define an RSPAN VLAN before configuring an RSPAN source or destination session.
Which two limitations of LOCAL SPAN are true? (Choose two)
A. The source and destination ports must reside in the same switch or switch stack
B. It can monitor only traffic that ingresses or egresses on the source interface or VLAN
C. A SPAN session can support multiple destination ports only if they are on the same VLAN
D. Each SPAN session supports only one source VLAN or interface
E. A switch can support only one local SPAN session at a time
A. The source and destination ports must reside in the same switch or switch stack
B. It can monitor only traffic that ingresses or egresses on the source interface or VLAN
Which two statements about RSPAN VLAN are true? (Choose two.)
A. RSPAN VLAN must be configured in VLAN configuration mode using the remote-span command.
B. RSPAN VLAN trunks can handle Spanning-Tree protocol, except for SPAN destination ports.
C. RSPAN VLAN access ports can handle Spanning-Tree protocol in conjunction with SPAN destination ports.
D. RSPAN VLAN does not support any protocols.
E. RSPAN VLAN traffic does not get flooded.
A. RSPAN VLAN must be configured in VLAN configuration mode using the remote-span command.
B. RSPAN VLAN trunks can handle Spanning-Tree protocol, except for SPAN destination ports.
Which statements about RSPAN are true? (Choose two)
A. It supports MAC address learning.
B. RSPAN VLANs can carry RSPAN traffic only.
C. Only one RSPAN VLAN can be configured per device.
D. RSPAN VLANs are exempt from VTP pruning.
E. MAC address learning is not supported.
F. RSPAN uses are GRE tunnel to transmit captured traffic.
B. RSPAN VLANs can carry RSPAN traffic only.
E. MAC address learning is not supported.
Which statement about Layer 2 protocol participation of ports involved in a SPAN session is true?
A. Neither a SPAN source nor SPAN destination participates in any Layer 2 protocols.
B. A SPAN source does not participate in any Layer 2 protocols.
C. A SPAN destination does not participate in any Layer 2 protocols.
D. Both SPAN source and SPAN destination participate in any Layer 2 protocols.
C. A SPAN destination does not participate in any Layer 2 protocols.
Which three statements about RSPAN VLAN are true? (Choose three)
A. RSPAN VLAN traffic only flows on trunk ports.
B. RSPAN VLAN prevents from carrying traffic.
C. RSPAN VLAN can not be a private primary VLAN or secondary VLAN.
D. All RSPAN VLAN traffic is flooded.
E. RSPAN VLAN traffic only flows on access ports.
F. RSPAN VLAN does not support Spanning-Tree Protocol.
A. RSPAN VLAN traffic only flows on trunk ports.
C. RSPAN VLAN can not be a private primary VLAN or secondary VLAN.
D. All RSPAN VLAN traffic is flooded.