View all questions & answers for the NSE 6 - Network Security 7.6 Support Engineer Materials exam


NSE 6 - Network Security 7.6 Support Engineer Materials-Question 76 Discussion

Refer to the exhibit, which contains the output of diagnose vpn tunnel list. Which command will capture ESP traffic for the VPN named DialUp_0? (Choose one answer)

  • A. diagnose sniffer packet any 'host 10.0.10.10'
  • B. diagnose sniffer packet any 'ip proto 50'
  • C. diagnose sniffer packet any 'esp and host 10.200.3.2'
  • D. diagnose sniffer packet any 'port 4500'
Correct Answer: D

Brave-Dump Clients Votes

C 66.67%
D 33.33%

Comments



Mohammed Khaled 2025-11-27 12:41:42

Selected Answers: D


D is correct the tunnel is up and there is spi sessions, so the 4500 port will be used, C is not correct as i think 10.200.3.2 is a traffic selector so it will be encapsulated.
  • Kalanidhi Mani Tripathi 2026-04-03 23:30:30
    10.200.3.2 is not the selector traffic. The selector traffic are dst: 0:0.0.0.0-255.255.255.255:0 src:0:10.0.10.10-10.0.10.10:0

Anonymous User 2026-04-03 23:30:10

Selected Answers: C


Network_Security_Support_Engineer_7.6_Study_Guide 339

I feel the correct answer is option C, as it is asking for a command which will capture ESP traffic. 10.200.3.2 is not the selector traffic. The selector traffic are

dst: 0:0.0.0.0-255.255.255.255:0
src:0:10.0.10.10-10.0.10.10:0

Anonymous User 2026-04-09 21:35:37

Selected Answers: C


esp traffic from DiaulUp_0