Which term describes copying traffic from switch ports to monitor communications by using a dedicated monitoring port?

Which term describes copying traffic from switch ports to monitor communications by using a dedicated monitoring port?

• A. SPAN (switched port analyzer)/mirror port
• B. Sensor
• C. TAP
• D. Inline

Answer: (A)

Port mirroring, also called SPAN or a mirror port, is the technique of duplicating traffic from switch ports and sending those copies to a dedicated destination port connected to a monitoring tool. This lets you observe communications without placing the analyzer in the actual data path, so normal traffic continues as usual while you capture or inspect copies for analysis, IDS work, or packet capture. A TAP, by contrast, is a physical device placed on the link to copy traffic independently of the switch’s replication mechanism, and an inline deployment places the monitoring device directly in the traffic path itself, which can affect latency and availability. A sensor is the analysis tool/device, not the method of duplicating traffic.

Port mirroring, also called SPAN or a mirror port, is the technique of duplicating traffic from switch ports and sending those copies to a dedicated destination port connected to a monitoring tool. This lets you observe communications without placing the analyzer in the actual data path, so normal traffic continues as usual while you capture or inspect copies for analysis, IDS work, or packet capture. A TAP, by contrast, is a physical device placed on the link to copy traffic independently of the switch’s replication mechanism, and an inline deployment places the monitoring device directly in the traffic path itself, which can affect latency and availability. A sensor is the analysis tool/device, not the method of duplicating traffic.