Eccouncil Exam ICS-SCADA Topic 6 Question 19 Discussion

Actual exam question for Eccouncil's ICS-SCADA exam

Question #: 19
Topic #: 6

[All ICS-SCADA Questions]

Which of the following is considered the best way to counter packet monitoring for a switch?

ATap

BDuplication

CSPAN

DPort mirror

Show Suggested Answer

Suggested Answer: D

Port mirroring (also known as SPAN - Switched Port Analyzer) is considered one of the best ways to counter packet monitoring on a switch. This technique involves copying traffic from one or more switch ports (or an entire VLAN) to another port where the monitoring device is connected. Port mirroring allows administrators to monitor network traffic in a non-intrusive way, as it does not affect network performance and is transparent to users and endpoints on the network. Reference:

Cisco Systems, 'Catalyst Switched Port Analyzer (SPAN) Configuration Example'.

by Gladys at Sep 18, 2024, 01:05 PM

Limited Time Offer

25%

Off

Get Premium ICS-SCADA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alisha

2 months ago

Dude, you're asking the wrong question. The real solution is to just unplug the switch and go back to carrier pigeons. Unhackable, am I right?

upvoted 0 times

Francisca

2 days ago

True, can't hack a carrier pigeon!

upvoted 0 times

...

Shawna

3 days ago

I never thought of that, but it could work!

upvoted 0 times

...

Paris

4 days ago

Haha, that's one way to avoid packet monitoring!

upvoted 0 times

...

Bo

5 days ago

Carrier pigeons are the way to go!

upvoted 0 times

...

Yuriko

6 days ago

D) Port mirror

upvoted 0 times

...

Quentin

7 days ago

C) SPAN

upvoted 0 times

...

Juan

8 days ago

B) Duplication

upvoted 0 times

...

Veronika

22 days ago

A) Tap

upvoted 0 times

...

Nada

28 days ago

Yeah, Port mirror is a good option. It allows us to copy traffic from one port to another for analysis.

upvoted 0 times

...

Eric

1 months ago

But if we have to stick with technology, I think Port mirror is the best way to counter packet monitoring.

upvoted 0 times

...

Dan

1 months ago

Unplug the switch and go back to carrier pigeons. Unhackable, am I right?

upvoted 0 times

...

Reuben

2 months ago

Hmm, I'd say port mirroring is the way to go. Tap, duplication, and SPAN all sound a bit too... 'hacky' for my liking.

upvoted 0 times

Johnetta

28 days ago

Yeah, tap, duplication, and SPAN seem a bit risky.

upvoted 0 times

...

Tashia

1 months ago

I agree, it's a more secure way to counter packet monitoring.

upvoted 0 times

...

Fidelia

2 months ago

Port mirroring is definitely the best option.

upvoted 0 times

...

Lizbeth

2 months ago

But a tap is a passive device that doesn't affect network performance, unlike a port mirror.

upvoted 0 times

...

Suzi

3 months ago

I disagree, I believe using a port mirror is more effective.

upvoted 0 times

...

Terry

3 months ago

Ah, the classic switch security conundrum. SPAN seems like the way to go - can't beat that built-in monitoring goodness.

upvoted 0 times

Becky

2 months ago

Port mirror can also be a good option for countering packet monitoring on a switch.

upvoted 0 times

...

Joesph

2 months ago

I agree, SPAN is a great built-in feature for monitoring network traffic.

upvoted 0 times

...

Temeka

2 months ago

Tap is another option to consider for countering packet monitoring.

upvoted 0 times

...

Billi

2 months ago

Port mirror is also a good choice for monitoring network traffic.

upvoted 0 times

...

An

2 months ago

SPAN is definitely the way to go for countering packet monitoring on a switch.

upvoted 0 times

...

Vicky

2 months ago

I agree, SPAN is a reliable option for switch security.

upvoted 0 times

...

Barrett

3 months ago

SPAN is definitely the way to go for countering packet monitoring.

upvoted 0 times

...

Lizbeth

3 months ago

I think the best way to counter packet monitoring for a switch is by using a tap.

upvoted 0 times

...