nerdexam
Cisco

200-201 · Question #195

What is a difference between an inline and a tap mode traffic monitoring?

The correct answer is A. Inline monitors traffic without examining other devices, while a tap mode tags traffic and examines. Inline mode traffic monitoring places the monitoring device directly in the data path, actively processing traffic without examining other network devices, whereas tap mode passively copies traffic for external examination and potential tagging by a monitoring system.

Submitted by marco_it· Mar 6, 2026Security Monitoring

Question

What is a difference between an inline and a tap mode traffic monitoring?

Options

  • AInline monitors traffic without examining other devices, while a tap mode tags traffic and examines
  • BTap mode monitors traffic direction, while inline mode keeps packet data as it passes through the
  • CTap mode monitors packets and their content with the highest speed, while the inline mode draws
  • DInline mode monitors traffic path, examining any traffic at a wire speed, while a tap mode monitors

How the community answered

(31 responses)
  • A
    90% (28)
  • C
    6% (2)
  • D
    3% (1)

Why each option

Inline mode traffic monitoring places the monitoring device directly in the data path, actively processing traffic without examining other network devices, whereas tap mode passively copies traffic for external examination and potential tagging by a monitoring system.

AInline monitors traffic without examining other devices, while a tap mode tags traffic and examinesCorrect

Inline mode monitoring places a device (e.g., an IPS) directly into the network path, where it actively inspects and enforces policies on traffic passing through it, focusing on the data stream rather than discovery of other devices. Tap mode involves passively copying traffic via a network tap to a separate monitoring system, which then examines and can apply tags for analysis, without interfering with the network flow.

BTap mode monitors traffic direction, while inline mode keeps packet data as it passes through the

Both inline and tap mode monitoring can provide data for analyzing traffic direction. Inline mode devices actively process and can modify packet data, not just 'keep' it.

CTap mode monitors packets and their content with the highest speed, while the inline mode draws

Both inline and tap mode monitoring can operate at high speeds, and the 'highest speed' is not a universal differentiator. Inline mode draws power and can be a single point of failure.

DInline mode monitors traffic path, examining any traffic at a wire speed, while a tap mode monitors

Both modes can monitor traffic at wire speed. 'Monitors traffic path' is vague, and the fundamental difference lies in their active (inline) vs. passive (tap) placement and function.

Concept tested: Inline vs. Tap mode monitoring

Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa-firepower-modules/user-guide/asa-fp-ftd-ug/getting-started-ftd.html

Topics

#traffic monitoring#inline mode#tap mode#network analysis

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 200-201 Practice