SNCF — Securing Networks with Firepower — Question 122

An engineer is investigating connectivity problems on Cisco Firepower for a specific SGT. Which command allows the engineer to capture real packets that pass through the firewall using an SGT of 64?

Answer options

• A. capture CAP type inline-tag 64 match ip any any
• B. capture CAP match 64 type inline-tag ip any any
• C. capture CAP headers-only type inline-tag 64 match ip any any
• D. capture CAP buffer 64 match ip any any

Correct answer: A

Explanation

The correct answer is A because it correctly specifies the command syntax for capturing packets with the specified SGT of 64. The other options either misplace the command parameters or do not conform to the correct syntax for capturing packets in this context.