What is the difference between inline traffic interrogation and traffic mirroring?

Question

Options

• AInline interrogation is less complex as traffic mirroring applies additional tags to data.
• BTraffic mirroring copies the traffic rather than forwarding it directly to the analysis tools
• CInline replicates the traffic to preserve integrity rather than modifying packets before sending them
• DTraffic mirroring results in faster traffic analysis and inline is considerably slower due to latency.

• B
  88% (23)
• C
  4% (1)
• D
  8% (2)

Explanation

Inline Traffic Interrogation: Inline traffic interrogation involves the direct interception and inspection of network traffic as it passes through a security device or system. It actively processes and potentially modifies the traffic in real-time, applying security policies or checks. Inline systems are placed directly in the network flow and can actively block, allow, or modify traffic based on predefined rules or policies. Traffic Mirroring (or Port Mirroring, SPAN - Switched Port Analyzer): Traffic mirroring involves duplicating a copy of network packets or traffic and sending that copy to a separate port or device for analysis or monitoring purposes. Rather than actively interfering with the original traffic flow, traffic mirroring passively copies the data, which is then sent to analysis tools or systems for examination, allowing administrators to inspect network activity without disrupting the original traffic.

No community discussion yet for this question.