D is the most convenient answer.

It should be B or C, because SW2 have vlans 18-23 and the servers connected to it are with problems too, so you can't use just vlan 10 as source. I would say rx for PC1 and tx for servers, so B is the one.

All answer would allow to for traffic monitoring to check what is the issue. But per task we should monitor only PC1 (VLan10) and both servers connected via switch on Eth1/2. Based on that I think that correct answer is D D. N9K(config)# monitor session 5 rx N9K(config-monitor)# description Span_session_5 N9K(config-monitor)# source vlan 10 rx N9K(config-monitor)# source interface ethernet 1/2 N9K(config-monitor)# destination interface ethernet 2/3

Has to be D. In order to get only PC1 from eth1/1, use source as VXLAN 10

source interface ethernet 1/1 - will monitor both PCs, however from question only PC1 has problem. i couldn't find the correct answer