nerdexam
Cisco

200-201 · Question #236

What is the difference between inline traffic interrogation (TAPS) and traffic mirroring (SPAN)?

The correct answer is D. SPAN ports filter out physical layer errors, making some types of analyses more difficult, and. To begin with, SPAN ports are not adequate for full duplex 1G links. Even under circumstances that seem to fall below their maximum capacity, they can quickly become overburdened and drop packets. This can also happen because the switch prioritizes regular port-to-port date…

Submitted by cyberguy42· Mar 6, 2026Security Monitoring

Question

What is the difference between inline traffic interrogation (TAPS) and traffic mirroring (SPAN)?

Options

  • AAPS interrogation is more complex because traffic mirroring applies additional tags to data and
  • BSPAN results in more efficient traffic analysis, and TAPS is considerably slower due to latency
  • CTAPS replicates the traffic to preserve integrity, and SPAN modifies packets before sending them
  • DSPAN ports filter out physical layer errors, making some types of analyses more difficult, and

How the community answered

(39 responses)
  • B
    3% (1)
  • C
    3% (1)
  • D
    95% (37)

Explanation

To begin with, SPAN ports are not adequate for full duplex 1G links. Even under circumstances that seem to fall below their maximum capacity, they can quickly become overburdened and drop packets. This can also happen because the switch prioritizes regular port-to-port date above SPAN port data. Unlike a network TAP, SPAN ports filter out physical layer errors, making some types of analyses more difficult, and as we have seen, incorrect delta times and altered frames can cause additional problems. TAPs, on the other hand, can run full duplex 1G links.

Topics

#TAPS#SPAN#traffic mirroring#network monitoring

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice