300-206 Latest Exam Braindumps
Question 5: Which two features are supported with the ASA packet-tracer command? (Choose two.)A. debugging packets in noncluster nodes
B. injecting modified ICMP packets through the firewall into the data path
C. simulating a packet decrypt
D. injecting tracer packets through the firewall into the data path
E. displaying each matching policy as a packet transits the firewall
Correct Answer: D,E
Explanation
Explanation/Reference
In addition to capturing packets with the capture command, it is possible to trace the lifespan of a
packet through the ASA to see if it is behaving as expected. The packet-tracer command enables you
to do the following:
*Debug all packet drops in a production network.
*Verify the configuration is working as intended.
*Show all rules applicable to a packet along with the CLI lines that caused the rule addition.
*Show a timeline of packet changes in a datapath.
*Inject tracer packets into the datapath.
*Search for an IPv4 or IPv6 address based on the user identity and the FQDN.
*Debug packets across cluster nodes.
https://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/I-R/cmdref2/p1.html
