SNCF — Securing Networks with Firepower — Question 91

A Cisco FTD device is running in transparent firewall mode with a VTEP bridge group member ingress interface. What must be considered by an engineer tasked with specifying a destination MAC address for a packet trace?

Answer options

• A. The output format option for the packet logs is unavailable.
• B. Only the UDP packet type is supported.
• C. The destination MAC address is optional if a VLAN ID value is entered.
• D. The VLAN ID and destination MAC address are optional.

Correct answer: C

Explanation

The correct answer is C because when a VLAN ID is provided, specifying a destination MAC address becomes unnecessary. Options A and B are incorrect as they do not relate to the requirements for packet tracing in this context. Option D is also incorrect because while the VLAN ID can make the MAC address optional, not both are entirely optional.