MENU
An engineer must perform a packet capture on a Cisco Secure Firewall Threat Defense device to confirm the MAC address of the host using IP address 192.168.100.100 while troubleshooting an ARP issue. What is the correct tcpdump command syntax to ensure that the MAC address appears in the packet capture output?
Suggested Answer: D
Get Premium 300-710 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
24 comments · newest first
KA
Kanisha
2 days ago
I feel like A is too complicated. Just need the MAC, right?
OR
Oren
7 days ago
Option C could work too, but it might not show the MAC as clearly.
ER
Ernestine
12 days ago
I agree, D seems straightforward for ARP issues.
LA
Lawana
17 days ago
I think option D is the best choice. It captures the MAC address clearly.
CH
Chaya
22 days ago
I’m leaning towards D as well. It’s clear and to the point.
TO
Tora
27 days ago
D is concise and effective. Definitely my pick!
BU
Bulah
1 month ago
I feel like A is too complicated for this task.
JA
Jackie
1 month ago
Option C seems good too, but it might not show MAC directly.
SY
Sylvie
1 month ago
I agree, D is straightforward for ARP issues.
GL
Glenn
2 months ago
I think option D is the best choice. It shows the MAC address clearly.
MA
Maira
2 months ago
Option D seems too simple for this task.
LI
Linsey
2 months ago
Isn't the MAC address always included in the output anyway?
SU
Sue
2 months ago
Wait, why would you use "ether" in the command?
GE
German
2 months ago
Definitely agree with that!
VE
Veronika
2 months ago
I think option C is the right one.
RO
Rozella
3 months ago
Is there a reason we need to specify the MAC address like that?
TA
Tamar
3 months ago
I thought it was A at first, but C makes more sense.
RO
Robt
3 months ago
Wait, why would you use "ether" in that command?
CL
Claudio
3 months ago
Definitely agree with C!
MO
Mollie
3 months ago
I think option C is the right one.
LA
Layla
3 months ago
I’m leaning towards option C, but I’m not completely confident about the syntax. I just remember needing to specify the right size for the capture.
PA
Patria
4 months ago
I feel like we did a similar question in class, and I want to say that "-ne" is important for showing the MAC addresses in the output.
VE
Verdell
4 months ago
I think option D looks familiar; it seems like the right way to capture MAC addresses, but I can't recall if "src" is the right filter.
MA
Marti
5 months ago
I remember we practiced using tcpdump, but I'm not sure if the command needs "ether" or "mac" at the end.