CCIE Security
Domain 5Objective 3
5.3 Perform Packet Capture and Analysis Using Wireshark, Tcpdump, SPAN, ERSPAN, and RSPAN CCIE-SECURITY Practice Questions (Page 1)
Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)
32questions here
7free pages
6concepts
20%of the exam
Questions 1–5
- 1
In Wireshark, which feature allows you to view the complete TCP conversation between two hosts, including the payload data, in a single window?
Select an answer first - 2
Which of the following is a required parameter when configuring an ERSPAN session on a Cisco switch?
Select an answer first - 3
Which capture method is best suited for analyzing traffic on a remote router that is not directly accessible via a switch port?
Select an answer first - 4
When comparing tcpdump and Wireshark, which statement is true?
Select an answer first - 5
Which Wireshark display filter correctly shows only packets that use TCP port 443?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.