Which feature is used to mirror traffic to a monitoring device for analysis?

Which feature is used to mirror traffic to a monitoring device for analysis?

• A. Port security
• B. SPAN mirroring
• C. Port mirroring
• D. CAM table

Answer: (C)

When you need to inspect network traffic, you copy frames from one or more switch ports to a dedicated monitor port so a device like a packet analyzer or IDS can see the data without affecting normal forwarding. This duplication capability is called port mirroring. It lets the monitoring device capture or analyze traffic in real time, or store it for later analysis, while the original traffic continues to flow as usual. On many devices, this same feature is referred to as SPAN mirroring (Switched Port Analyzer) on Cisco gear, but the underlying concept remains port mirroring. That makes port mirroring the correct term for mirroring traffic to a monitoring device.

When you need to inspect network traffic, you copy frames from one or more switch ports to a dedicated monitor port so a device like a packet analyzer or IDS can see the data without affecting normal forwarding. This duplication capability is called port mirroring. It lets the monitoring device capture or analyze traffic in real time, or store it for later analysis, while the original traffic continues to flow as usual. On many devices, this same feature is referred to as SPAN mirroring (Switched Port Analyzer) on Cisco gear, but the underlying concept remains port mirroring. That makes port mirroring the correct term for mirroring traffic to a monitoring device.