A network security administrator needs to monitor the contents of data sent between a secure network and the rest of the company. Which of the following monitoring methods will accomplish this task?

Port mirroring (also known as SPAN - Switched Port Analyzer) duplicates all network traffic from a source port or VLAN to a destination monitoring port on a switch. This allows a network security administrator to capture and analyze the actual data packet contents as they traverse the network, facilitating deep inspection for security analysis.

Flow data (e.g., NetFlow, IPFIX) provides metadata about network traffic, such as source/destination IPs, ports, and protocols, but does not capture the actual content of the data packets.

Syslog entries are system messages and logs from devices, providing information about events and device status, but not the contents of data flowing through the network.

SNMP traps are unsolicited messages sent by SNMP agents to managers to report significant events, but they do not contain the actual data content of network communications.