ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 86 - N10-009 discussion

Report
Export

A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic. Which of the following should the administrator use?

A.
SNMP trap
Answers
A.
SNMP trap
B.
Port mirroring
Answers
B.
Port mirroring
C.
Syslog collection
Answers
C.
Syslog collection
D.
API integration
Answers
D.
API integration
Suggested answer: B

Explanation:

Port mirroring, also known as SPAN (Switched Port Analyzer), is used to send a copy of network packets seen on one switch port (or an entire VLAN) to another port where the IDS is connected. This allows the IDS to passively inspect network traffic without interfering with the actual traffic flow. Port mirroring is an essential feature for implementing IDS in a network for traffic analysis and security monitoring.

Reference: CompTIA Network+ study materials.

asked 02/10/2024
Sharon Sandhu
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first