HPE Aruba Certified Professional (ACP) – SD-WAN — Question 9

You need to quickly verify whether a server is responding to a connection request from a client device. What is the best way to capture these packets on a CX switch?

Answer options

• A. Configure a mirror session using ERSPAN to a computer running Wreshark.
• B. Configure a mirror session with another port on the switch as the destination.
• C. Inspect the summary of the packets in real time on the switch using tcpdump.
• D. Configure a mirror session to the CPU, use tshark to capture to a PCAP file.

Correct answer: C

Explanation

The correct answer is C because tcpdump allows for real-time packet analysis directly on the switch, providing immediate feedback on the connection status. Options A and D involve capturing packets externally, which is not as immediate, while option B does not specify a method for packet inspection.