Eccouncil Exam ICS-SCADA Topic 6 Question 19 Discussion

Actual exam question for Eccouncil's ICS/SCADA Cyber Security exam

Question #: 19
Topic #: 6

[All ICS/SCADA Cyber Security Questions]

Which of the following is considered the best way to counter packet monitoring for a switch?

ATap

BDuplication

CSPAN

DPort mirror

Show Suggested Answer

Suggested Answer: D

Port mirroring (also known as SPAN - Switched Port Analyzer) is considered one of the best ways to counter packet monitoring on a switch. This technique involves copying traffic from one or more switch ports (or an entire VLAN) to another port where the monitoring device is connected. Port mirroring allows administrators to monitor network traffic in a non-intrusive way, as it does not affect network performance and is transparent to users and endpoints on the network. Reference:

Cisco Systems, 'Catalyst Switched Port Analyzer (SPAN) Configuration Example'.

by Gladys at Sep 18, 2024, 01:05 PM

Limited Time Offer

25%

Off

Get Premium ICS-SCADA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lizbeth

4 days ago

But a tap is a passive device that doesn't affect network performance, unlike a port mirror.

upvoted 0 times

...

Suzi

14 days ago

I disagree, I believe using a port mirror is more effective.

upvoted 0 times

...

29 days ago

I think the best way to counter packet monitoring for a switch is by using a tap.

upvoted 0 times

...