Courseiva
Knowledge + Practice
CertificationsVendorsCareer RoadmapsLabs & ToolsStudy GuidesGlossaryPractice Questions
C
Courseiva

Free IT certification practice questions with explained answers for CCNA, CompTIA, AWS, Azure, Google Cloud, and more.

Certification Practice Questions

CCNA practice questionsSecurity+ SY0-701 practice questionsAWS SAA-C03 practice questionsAZ-104 practice questionsAZ-900 practice questionsCLF-C02 practice questionsA+ Core 1 practice questionsGoogle Cloud ACE practice questionsCySA+ CS0-003 practice questionsNetwork+ N10-009 practice questions
View all certifications →

Product

CertificationsCertification PathsExam TopicsPractice TestsExam Dumps vs Practice TestsStudy HubComparisons

Company

AboutContactEditorial PolicyQuestion Writing PolicyTrust Center

Legal

Privacy PolicyTerms of Service

Courseiva is a free IT certification practice platform offering original exam-style practice questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics for Cisco, CompTIA, Microsoft, AWS, and other technology certifications.

© 2026 Courseiva. Courseiva is operated by JTNetSolutions Ltd. All rights reserved.

Courseiva is an independent certification practice platform and is not affiliated with, endorsed by, or sponsored by Cisco, Microsoft, AWS, CompTIA, Google, ISC2, ISACA, or any other certification vendor. Vendor names and certification marks are used only to identify the exams learners are preparing for.

Certifications›300-410›Objectives›SPAN, RSPAN, and ERSPAN
Objective 407.0

SPAN, RSPAN, and ERSPAN

300-410 Practice Questions

Full Practice Test →All Objectives

300-410 SPAN, RSPAN, and ERSPAN — Practice Questions

30 questions from this objective

Question 2mediummultiple choice
Read the full NAT/PAT explanation →

A network engineer configures SPAN on a Cisco Catalyst switch to monitor traffic between two hosts. The engineer configures the source interface as GigabitEthernet0/1 and the destination interface as GigabitEthernet0/2. After the configuration, the engineer notices that the monitored traffic is not being forwarded to the destination port. What is the most likely cause?

Question 3mediummultiple choice
Open the full VLAN trunking answer →

An engineer configures RSPAN on a Cisco switch to monitor traffic from VLAN 10 across multiple switches. The engineer creates an RSPAN VLAN (VLAN 100) on the source switch and configures the source as VLAN 10. On the remote switch, the engineer configures the destination port as GigabitEthernet0/1 in VLAN 100. However, the destination port does not forward any monitored traffic. What is the most likely cause?

Question 4hardmultiple choice
Review the full routing breakdown →

A network engineer is troubleshooting an ERSPAN configuration where traffic from a source router is being sent to a remote monitoring server. The engineer configures an ERSPAN source session on Router A to capture traffic on GigabitEthernet0/0 and send it to the IP address 10.1.1.100. The monitoring server does not receive any packets. The engineer verifies that IP connectivity exists between Router A and the server. What is the most likely cause?

Question 5mediummultiple choice
Open the full VLAN trunking answer →

An engineer configures a local SPAN session on a Cisco switch to monitor all traffic on VLAN 20. The engineer uses the command 'monitor session 1 source vlan 20' and 'monitor session 1 destination interface GigabitEthernet0/3'. The engineer connects a laptop to GigabitEthernet0/3 and runs a packet capture, but sees only traffic from the switch itself, not from other devices in VLAN 20. What is the most likely cause?

Question 6hardmultiple choice
Open the full VLAN trunking answer →

A network engineer configures an RSPAN session on Switch A to monitor traffic from interface GigabitEthernet0/1 and sends it to Switch B. The engineer creates RSPAN VLAN 50 on both switches and configures the trunk between them to allow VLAN 50. On Switch B, the engineer configures the destination port as GigabitEthernet0/2 in VLAN 50. The engineer notices that the destination port is not forwarding any traffic. What should the engineer check first?

Question 7hardmultiple choice
Read the full NAT/PAT explanation →

An engineer configures ERSPAN on a Cisco router to monitor traffic on interface GigabitEthernet0/0/0 and send it to a monitoring server at 192.168.1.100. The engineer configures the ERSPAN session with a tunnel source of 10.0.0.1 and a tunnel destination of 192.168.1.100. The monitoring server receives no packets. The engineer pings 192.168.1.100 from the router and succeeds. What is the most likely cause?

Question 8mediummultiple choice
Open the full VLAN trunking answer →

A network engineer configures a SPAN session on a Cisco switch to monitor traffic on interface GigabitEthernet0/1 and sends it to interface GigabitEthernet0/2. The engineer notices that the destination port is up but does not forward any traffic. The engineer checks the configuration and sees that the destination port is configured as a trunk port. What is the most likely cause?

Question 9hardmultiple choice
Open the full VLAN trunking answer →

An engineer configures an RSPAN session on a Cisco switch to monitor traffic from VLAN 30 and send it to a remote switch. The engineer creates RSPAN VLAN 200 on both switches and configures the trunk to allow VLAN 200. On the remote switch, the engineer configures the destination port as GigabitEthernet0/4 in VLAN 200. The engineer notices that the destination port is forwarding traffic, but the traffic is not from the source VLAN 30; instead, it is broadcast traffic from other VLANs. What is the most likely cause?

Question 10hardmultiple choice
Read the full NAT/PAT explanation →

A network engineer configures an ERSPAN session on a Cisco router to monitor traffic on interface GigabitEthernet0/0/0 and send it to a monitoring server at 172.16.1.100. The engineer uses the command 'monitor session 1 type erspan-source' and configures the tunnel. The monitoring server receives packets, but the packets contain only the original source and destination IP addresses of the monitored traffic, not the encapsulated GRE headers. What is the most likely cause?

Question 11mediummultiple choice
Read the full NAT/PAT explanation →

A network engineer runs the following command on switch SW1:

SW1# show monitor session 1

Session 1 --------- Type : Local Session Source Ports : Both : Gi0/1, Gi0/2 Destination Ports : Gi0/3

Encapsulation : Native

Ingress : Disabled

Based on this output, which statement is correct?

Question 12mediummultiple choice
Open the full VLAN trunking answer →

A network engineer runs the following command on switch SW2:

SW2# show monitor session 2

Session 2 --------- Type : Remote Source Session Source Ports : Both : Gi0/4 Source VLANs : RX Only : 100 Destination Ports : Gi0/5

Encapsulation : Native

Ingress : Disabled

Based on this output, which statement is correct?

Question 13mediummultiple choice
Read the full NAT/PAT explanation →

A network engineer runs the following command on switch SW3:

SW3# show monitor session 3

Session 3 --------- Type : Remote Destination Session Source Ports : RX Only : Gi0/6 Destination Ports : Gi0/7

Encapsulation : Native

Ingress : Disabled

Based on this output, which statement is correct?

Question 14mediummultiple choice
Read the full NAT/PAT explanation →

A network engineer runs the following command on router R2:

R2# show monitor session 4

Session 4 --------- Type : ERSPAN Source Session Status : Admin Enabled Source Ports : Both : Gi0/0 Destination IP : 192.168.1.10 Origin IP : 10.0.0.2 ERSPAN ID : 100

Based on this output, which statement is correct?

Question 15mediummultiple choice
Read the full NAT/PAT explanation →

A network engineer runs the following command on router R3:

R3# show monitor session 5

Session 5 --------- Type : ERSPAN Destination Session Status : Admin Enabled Source IP : 10.0.0.2 Destination Ports : Gi0/1

Encapsulation : Native

Ingress : Disabled ERSPAN ID : 100

Based on this output, which statement is correct?

Question 16hardmultiple choice
Read the full NAT/PAT explanation →

A network engineer runs the following command on switch SW4:

SW4# show monitor session 6

Session 6 --------- Type : Local Session Source Ports : Both : Gi0/8, Gi0/9 Destination Ports : Gi0/10

Encapsulation : Native

Ingress : Enabled

Based on this output, which statement is correct?

Question 17mediummultiple choice
Read the full NAT/PAT explanation →

A network engineer runs the following command on switch SW5:

SW5# show monitor session 7

Session 7 --------- Type : Local Session Source Ports : Both : Gi0/11 Destination Ports : Gi0/12

Encapsulation : Replicate

Ingress : Disabled

Based on this output, which statement is correct?

Question 18hardmultiple choice
Open the full VLAN trunking answer →

A network engineer runs the following command on switch SW6:

SW6# show monitor session 8

Session 8 --------- Type : Remote Source Session Source Ports : Both : Gi0/13 Source VLANs : TX Only : 200 Destination Ports : Gi0/14

Encapsulation : Dot1q

Ingress : Disabled

Based on this output, which statement is correct?

Question 19mediummultiple choice
Read the full NAT/PAT explanation →

A network engineer runs the following command on router R4:

R4# show monitor session 9

Session 9 --------- Type : ERSPAN Source Session Status : Admin Disabled Source Ports : Both : Gi0/2 Destination IP : 192.168.2.20 Origin IP : 10.0.0.3 ERSPAN ID : 200

Based on this output, which statement is correct?

Question 20mediummultiple choice
Read the full NAT/PAT explanation →

Consider the following partial configuration on a Cisco IOS-XE switch:

monitor session 1 source interface GigabitEthernet1/0/1 both monitor session 1 destination interface GigabitEthernet1/0/2

What is the effect of this configuration?

Question 21mediummultiple choice
Open the full VLAN trunking answer →

Given the configuration:

monitor session 2 source vlan 10-12 both monitor session 2 destination interface GigabitEthernet1/0/3

Which statement is true?

Question 22mediummultiple choice
Open the full VLAN trunking answer →

Examine the RSPAN configuration:

vlan 100

name RSPAN_VLAN remote-span ! monitor session 1 source interface GigabitEthernet1/0/1 both monitor session 1 destination remote vlan 100

What is the purpose of the 'remote-span' command under VLAN 100?

Question 23mediummultiple choice
Read the full NAT/PAT explanation →

Consider the ERSPAN configuration on a router:

monitor session 1 type erspan-source source interface GigabitEthernet0/0/1 both destination erspan-id 1

ip address 192.168.1.100

origin ip address 192.168.1.1

What is the primary purpose of the 'origin ip address' command?

Question 24mediummultiple choice
Read the full NAT/PAT explanation →

A network engineer configured the following:

monitor session 3 type erspan-source source interface GigabitEthernet0/0/2 rx destination erspan-id 2

ip address 10.0.0.2

origin ip address 10.0.0.1

What traffic will be mirrored?

Question 25mediummultiple choice
Open the full VLAN trunking answer →

What is missing from this RSPAN configuration on a switch?

monitor session 1 source interface GigabitEthernet1/0/1 both monitor session 1 destination remote vlan 100

Assume VLAN 100 exists but is not configured as an RSPAN VLAN.

Question 26easymultiple choice
Full question →

What is the default behavior of a local SPAN session if no direction (rx, tx, both) is specified?

Question 27easymultiple choice
Full question →

In ERSPAN, what is the default encapsulation type used for transporting mirrored packets across an IP network?

Question 28mediummultiple choice
Full question →

Which of the following is a limitation of local SPAN on a Cisco switch?

Question 29mediummulti select
Full question →

Which TWO commands verify the operational status of a local SPAN session on a Cisco IOS-XE switch? (Choose TWO.)

Question 30hardmulti select
Full question →

Which THREE symptoms indicate a misconfigured RSPAN session on a Cisco switch? (Choose THREE.)

Question 31mediummulti select
Full question →

Which TWO configuration steps are required to set up an ERSPAN session on a Cisco IOS-XE device? (Choose TWO.)

More SPAN, RSPAN, and ERSPAN questions available in the full practice test.

Continue Practising →
←

Previous objective

NetFlow and Flexible NetFlow

Next objective

DHCP (IPv4 and IPv6)

→

All 300-410 Objectives

  • 100.Layer 3 Technologies35%
  • 101.EIGRP Troubleshooting
  • 102.OSPF Troubleshooting (v2/v3)
  • 103.BGP Troubleshooting
  • 104.Route Redistribution
  • 105.Policy-Based Routing (PBR)
  • 106.VRF-Lite
  • 107.Route Maps and Route Filtering
  • 108.Administrative Distance
  • 109.Route Summarization
  • 110.Bidirectional Forwarding Detection (BFD)
  • 200.VPN Technologies20%
  • 201.MPLS Operations
  • 202.MPLS L3VPN
  • 203.DMVPN
  • 204.IPsec Site-to-Site VPN
  • 205.IPv6 Tunneling Techniques
  • 300.Infrastructure Security20%
  • 301.Device Access Control
  • 302.IPv4 Access Control Lists
  • 303.IPv6 Traffic Filtering and uRPF
  • 304.Control Plane Policing (CoPP)
  • 305.IPv6 First Hop Security
  • 400.Infrastructure Services25%
  • 401.Device Management
  • 402.SNMP Troubleshooting
  • 403.Network Logging and Syslog
  • 404.Embedded Event Manager (EEM)
  • 405.IP SLA
  • 406.NetFlow and Flexible NetFlow
  • 407.SPAN, RSPAN, and ERSPAN
  • 408.DHCP (IPv4 and IPv6)
  • 409.NAT and PAT