312-50V10 · Question #515
This configuration allows NIC to pass all traffic it receives to the Central Processing Unit (CPU), instead of passing only the frames that the controller is intended to receive. Select the option tha
The correct answer is C. Promiscuous mode. Promiscuous mode is a NIC configuration in which the adapter passes every frame it receives to the CPU rather than discarding frames not addressed to it, enabling full network traffic capture.
Question
This configuration allows NIC to pass all traffic it receives to the Central Processing Unit (CPU), instead of passing only the frames that the controller is intended to receive. Select the option that BEST describes the above statement.
Options
- AMulti-cast mode
- BWEM
- CPromiscuous mode
- DPort forwarding
How the community answered
(39 responses)- A3% (1)
- B8% (3)
- C87% (34)
- D3% (1)
Why each option
Promiscuous mode is a NIC configuration in which the adapter passes every frame it receives to the CPU rather than discarding frames not addressed to it, enabling full network traffic capture.
Multicast mode configures a NIC to receive frames addressed to specific multicast group MAC addresses, not all traffic indiscriminately.
WEM (Windows Event Management) is a system event management concept and is entirely unrelated to NIC traffic filtering modes.
In promiscuous mode, the NIC disables its normal hardware-level MAC address filter and forwards all frames on the network segment to the host operating system's network stack and CPU. This is the required mode for packet capture tools such as Wireshark and tcpdump so they can see traffic beyond just the host's own unicast frames. It is a foundational concept in network monitoring and forensic data collection.
Port forwarding redirects traffic from one network address or port to another and has no relation to how a NIC filters received frames.
Concept tested: NIC promiscuous mode for full traffic capture
Source: https://www.wireshark.org/docs/wsug_html_chunked/ChAppFilesConfigurationSection.html
Topics
Community Discussion
No community discussion yet for this question.