GSLC · Question #196
You work as a Network Administrator in a company. The NIDS is implemented on the network. You want to monitor network traffic. Which of the following modes will you configure on the network…
The correct answer is D. Promiscuous. Promiscuous mode on a NIC causes it to pass all frames on the network segment to the OS regardless of destination MAC address, which is required for a NIDS to inspect all traffic.
Question
You work as a Network Administrator in a company. The NIDS is implemented on the network. You want to monitor network traffic. Which of the following modes will you configure on the network interface card to accomplish the task?
Options
- AFull Duplex
- BAudit mode
- CHalf duplex
- DPromiscuous
How the community answered
(36 responses)- B3% (1)
- C6% (2)
- D92% (33)
Why each option
Promiscuous mode on a NIC causes it to pass all frames on the network segment to the OS regardless of destination MAC address, which is required for a NIDS to inspect all traffic.
Full duplex is a transmission mode describing simultaneous bidirectional communication on a link and does not affect whether the NIC captures frames addressed to other hosts.
Audit mode is not a recognized or standard NIC operating mode and has no defined technical meaning in the context of network interface card configuration.
Half duplex describes one-directional-at-a-time communication and is a link characteristic, not a packet capture mode, so it does not enable monitoring of all network traffic.
In promiscuous mode, the network interface card passes every received frame to the operating system rather than discarding frames not addressed to its own MAC, enabling the NIDS to inspect all packets traversing the network segment. Without this mode, the NIC silently drops non-addressed traffic, making monitoring incomplete and ineffective for intrusion detection. Promiscuous mode is the standard and necessary NIC configuration for any passive network monitoring or NIDS deployment.
Concept tested: Promiscuous mode NIC configuration for NIDS traffic monitoring
Topics
Community Discussion
No community discussion yet for this question.