Syslogs reveal malicious activity originating from an internal host that is located at IP address 10.10.10.251. From the local gateway router, the administrator successfully pings the host IP address and populates the ARP cache of the router. The administrator then issues the show ip arp 10.10.10.251command and discovers that the MAC address of the host is 0011.9254.e2a0. What could the administrator do next to discover the physical location of the malicious host?

Syslogs reveal malicious activity originating from an internal host that is located at IP address 10.10.10.251. From the local gateway router, the administrator successfully pings the host IP address and populates the ARP cache of the router. The administrator then issues the show ip arp 10.10.10.251command and discovers that the MAC address of the host is 0011.9254.e2a0. What could the administrator do next to discover the physical location of the malicious host?

• Issue the show mac address-table address 0011.9254.e2a0command on various switches and follow the path tothe host.
• Issue the show vlancommand on various switches and follow the path tothe host.
• Issue the traceroute 0011.9254.e2a0command and follow the path to the host.
• Issue the traceroute 10.10.10.251command and follow the path to the host.

Exam with this question: CCNP TSHOOT Final Exam Answers (Version 7)
Exam with this question: CCNP TSHOOT Final Exam Answers (Version 6)