View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam


NSE 6 - Network Security 7.6 Support Engineer Materials-Question 76 Discussion
Comment Image Comment Image Comment Image

Refer to the exhibit, which contains the output of diagnose vpn tunnel list. Which command will capture ESP traffic for the VPN named DialUp_0? (Choose one answer)

  • A. diagnose sniffer packet any 'host 10.0.10.10'
  • B. diagnose sniffer packet any 'ip proto 50'
  • C. diagnose sniffer packet any 'esp and host 10.200.3.2'
  • D. diagnose sniffer packet any 'port 4500'
Correct Answer: D

Brave-Dump Clients Votes

C 75%
D 25%

Comments



Mohammed Khaled 2025-11-27 12:41:42

Selected Answers: D


D is correct the tunnel is up and there is spi sessions, so the 4500 port will be used, C is not correct as i think 10.200.3.2 is a traffic selector so it will be encapsulated.
  • Kalanidhi Mani Tripathi 2026-04-03 23:30:30
    10.200.3.2 is not the selector traffic. The selector traffic are dst: 0:0.0.0.0-255.255.255.255:0 src:0:10.0.10.10-10.0.10.10:0

Anonymous User 2026-04-03 23:30:10

Selected Answers: C


Network_Security_Support_Engineer_7.6_Study_Guide 339

I feel the correct answer is option C, as it is asking for a command which will capture ESP traffic. 10.200.3.2 is not the selector traffic. The selector traffic are

dst: 0:0.0.0.0-255.255.255.255:0
src:0:10.0.10.10-10.0.10.10:0

Anonymous User 2026-04-09 21:35:37

Selected Answers: C


esp traffic from DiaulUp_0

Anonymous User 2026-05-17 18:07:44

Selected Answers: C


answer is C