CompTIA Exam N10-009 Topic 3 Question 6 Discussion

Actual exam question for CompTIA's N10-009 exam

Question #: 6
Topic #: 3

A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic. Which of the following should the administrator use?

ASNMP trap

BPort mirroring

CSyslog collection

DAPI integration

Show Suggested Answer

Suggested Answer: B

Port mirroring, also known as SPAN (Switched Port Analyzer), is used to send a copy of network packets seen on one switch port (or an entire VLAN) to another port where the IDS is connected. This allows the IDS to passively inspect network traffic without interfering with the actual traffic flow. Port mirroring is an essential feature for implementing IDS in a network for traffic analysis and security monitoring. Reference: CompTIA Network+ study materials.

by Sherell at Jul 16, 2024, 08:26 AM

Limited Time Offer

25%

Off

Get Premium N10-009 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shaquana

4 months ago

B all the way! I can already see the network admin trying to 'mirror' the entire office through the vents. That would be hilarious!

upvoted 0 times

Haydee

3 months ago

B) Port mirroring

upvoted 0 times

...

Eden

3 months ago

Haha, that would be funny to watch!

upvoted 0 times

...

Annita

3 months ago

B) Port mirroring

upvoted 0 times

...

Buddy

4 months ago

Definitely going with B. Port mirroring is the way to go when you want to keep an eye on things without causing any trouble.

upvoted 0 times

Kenny

3 months ago

Port mirroring is definitely the most efficient way to inspect network traffic without disrupting the network.

upvoted 0 times

...

Merri

3 months ago

SNMP trap could also be useful for monitoring network devices remotely.

upvoted 0 times

...

Lisbeth

3 months ago

I agree, port mirroring is the best option for monitoring network traffic.

upvoted 0 times

...

Bambi

4 months ago

I believe port mirroring is the most effective option because it copies all traffic to another port for analysis.

upvoted 0 times

...

Loreen

5 months ago

I'm not sure, but I think SNMP trap could also be a good choice.

upvoted 0 times

...

Yoko

5 months ago

I'm torn between B and D. API integration could give you more granular control, but port mirroring is the tried and true method.

upvoted 0 times

...

Trevor

5 months ago

I agree with Lettie, port mirroring is the best option for inspecting network traffic.

upvoted 0 times

...

Audrie

5 months ago

Port mirroring for sure! That's the classic way to monitor network traffic without disrupting the flow.

upvoted 0 times

Irving

4 months ago

It's a common practice for network administrators to use port mirroring for passive IDS.

upvoted 0 times

...

Willie

4 months ago

I agree, it allows you to inspect the traffic without affecting the flow.

upvoted 0 times

...

Mike

4 months ago

Port mirroring is definitely the way to go for monitoring network traffic.

upvoted 0 times

...

Pamella

4 months ago

It's a common practice for network administrators to use port mirroring for passive IDS.

upvoted 0 times

...

Leota

4 months ago

I agree, it allows you to see all the traffic without affecting the network.

upvoted 0 times

...

Vilma

4 months ago

Port mirroring is definitely the way to go for monitoring network traffic.

upvoted 0 times

...

Lettie

5 months ago

I think the administrator should use port mirroring.

upvoted 0 times

...