SNCF — Securing Networks with Firepower — Question 37
A connectivity issue is occurring between a client and a server which are communicating through a Cisco Firepower device. While troubleshooting, a network administrator sees that traffic is reaching the server, but the client is not getting a response. Which step must be taken to resolve this issue without initiating traffic from the client?
Answer options
- A. Use packet-tracer to ensure that traffic is not being blocked by an access list
- B. Use packet capture to ensure that traffic is not being blocked by an access list
- C. Use packet capture to validate that the packet passes through the firewall and is NATed to the corrected IP address
- D. Use packet-tracer to validate that the packet passes through the firewall and is NATed to the corrected IP address
Correct answer: D
Explanation
The correct answer is D because using packet-tracer allows the administrator to simulate the packet's path through the firewall and verify NAT translation without sending actual traffic from the client. Option A and B do not confirm NAT behavior, while option C involves packet capture, which does not fit the requirement of not initiating traffic from the client.