SNCF — Securing Networks with Firepower — Question 292

An engineer must configure an ERSPAN passive interface on a Cisco Secure IPS by using the Cisco Secure Firewall Management Center. These configurations have been performed already:

• Configure the passive interface.
• Configure the ERSPAN IP address.

Which two additional settings must be configured to complete the configuration? (Choose two.)

Answer options

• A. Destination MAC
• B. TCP Intercept
• C. Bypass Mode
• D. Flow Id
• E. Source IP

Correct answer: A, D

Explanation

The correct options, A and D, are necessary to specify the destination MAC address for the ERSPAN and to identify the flow ID for the traffic being monitored. The other options, B, C, and E, do not pertain directly to the required configurations for completing the ERSPAN setup.