A security operations center needs to detect and investigate suspicious traffic patterns in real time. They want to combine flow-level visibility with full packet capture for forensic analysis. They have limited storage and need to prioritize which traffic to capture. Which approach is most effective?

Use SPAN to capture all traffic continuously to a large storage array.

Use NetFlow only and rely on flow records for forensic analysis.

Use ERSPAN to send all traffic to Nexus Dashboard for analysis.

Use NetFlow to identify suspicious flows, then use SPAN to capture only those flows to a packet analyzer.

A network engineer needs to capture traffic on a specific VLAN that spans multiple Nexus switches in the same data center. The capture device is connected to a switch that is not in the VLAN. The engineer wants to use RSPAN. What must be configured to make this work?

Create a dedicated RSPAN VLAN and configure it on all switches in the path, then configure the RSPAN session on the source switches.

Configure a SPAN session on each switch and connect the capture device to one of them.

Enable NetFlow on the VLAN and export to the capture device.

Configure an ERSPAN session on each source switch to send traffic directly to the capture device.

CiscoCertified Network Professional Data Center

Domain 1Objective 9

1.9 Implement Infrastructure Monitoring Using Traditional and AI-powered Tools Such as NetFlow, SPAN, and Cisco Nexus Dashboard 350-601 Practice Questions (Page 7)

Part of the Network domain, which accounts for 25% of the 350-601 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

7concepts

25%of the exam

Questions 31–32

31expert · hard
A security operations center needs to detect and investigate suspicious traffic patterns in real time. They want to combine flow-level visibility with full packet capture for forensic analysis. They have limited storage and need to prioritize which traffic to capture. Which approach is most effective?
Select an answer first
32application · medium
A network engineer needs to capture traffic on a specific VLAN that spans multiple Nexus switches in the same data center. The capture device is connected to a switch that is not in the VLAN. The engineer wants to use RSPAN. What must be configured to make this work?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 350-601

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-601” is a trademark of its owner, used for identification only.

1.9 Implement Infrastructure Monitoring Using Traditional and AI-powered Tools Such as NetFlow, SPAN, and Cisco Nexus Dashboard 350-601 Practice Questions (Page 7)

Questions 31–32

A network engineer needs to capture traffic on a specific VLAN that spans multiple Nexus switches in the same data center. The capture device is connected to a switch that is not in the VLAN. The engineer wants to use RSPAN. What must be configured to make this work?

Keep studying — Network