N10-005 · Question #897
It has been suspected that one of the users is using the network inappropriately. As a preventive measure HR has authorized the IT department to enable port mirroring on the user's network port…
The correct answer is C. Network sniffer. Port mirroring copies traffic from a monitored port to an analysis port; a network sniffer captures and inspects that copied traffic to analyze user activity.
Question
It has been suspected that one of the users is using the network inappropriately. As a preventive measure HR has authorized the IT department to enable port mirroring on the user's network port. Which of the following devices would be used to monitor the network activity?
Options
- APort analyzer
- BMultimeter
- CNetwork sniffer
- DCable certifier
How the community answered
(27 responses)- A4% (1)
- B7% (2)
- C85% (23)
- D4% (1)
Why each option
Port mirroring copies traffic from a monitored port to an analysis port; a network sniffer captures and inspects that copied traffic to analyze user activity.
A 'port analyzer' is not a standard network tool; port analysis is the function of the switch feature itself, not a separate device.
A multimeter measures electrical voltage, current, and resistance and has no capability to capture or interpret network packets.
A network sniffer (protocol analyzer) is the tool that connects to the mirror port and captures packet-level traffic for inspection. Port mirroring on a switch sends a copy of all frames from the target port to a designated analysis port, and only a network sniffer has the capability to decode and analyze those packets.
A cable certifier tests physical cable performance against wiring standards and cannot capture or analyze network traffic.
Concept tested: Port mirroring and network traffic capture
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/span.html
Topics
Community Discussion
No community discussion yet for this question.