Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 220

An administrator needs to troubleshoot a User-ID deployment. The administrator believes that there is an issue related to LDAP authentication. The administrator wants to create a packet capture on the management plane.
Which CLI command should the administrator use to obtain the packet capture for validating the configuration?

Answer options

• A. > scp export mgmt-pcap from mgmt.pcap to (username@host:path)
• B. > scp export poap-mgmt from poap.mgmt to (username@host:path)
• C. > ftp export mgmt-pcap from mgmt.pcap to <FTF host>
• D. > scp export pcap from pcap to (username@host:path)

Correct answer: A

Explanation

The correct command is A, as it specifically exports the management plane packet capture, which is necessary for troubleshooting LDAP authentication issues. Options B and D do not pertain to the management plane, while C uses FTP instead of SCP, which is not suitable for this task.