A technician is troubleshooting a network issue and needs to view network traffic on a switch in real-time. Which of the following would allow the technician to view network traffic on a switch?

The correct answer is D. Port mirroring. Port mirroring (also called SPAN - Switched Port Analyzer) copies traffic flowing through one or more switch ports and sends a duplicate to a designated monitoring port where a packet analyzer (like Wireshark) can capture it in real-time. Unlike a hub, a switch only forwards…

Network operations

Question

Options

AISAKMP
BPort forwarding
CPort security
DPort mirroring

How the community answered

(28 responses)

B
4% (1)
C
4% (1)
D
93% (26)

Explanation

Port mirroring (also called SPAN - Switched Port Analyzer) copies traffic flowing through one or more switch ports and sends a duplicate to a designated monitoring port where a packet analyzer (like Wireshark) can capture it in real-time. Unlike a hub, a switch only forwards frames to their intended destination port, so without port mirroring a monitoring device would only see its own traffic. ISAKMP is an Internet Key Exchange protocol used in VPN negotiations. Port forwarding redirects inbound traffic to an internal host. Port security restricts which MAC addresses can connect to a port - none of these provide traffic visibility.

Topics

#port mirroring#traffic analysis#switch management#SPAN

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice