SY0-301 · Question #878
Which of the following is BEST used to capture and analyze network traffic between hosts on the same network segment?
The correct answer is A. Protocol analyzer. A protocol analyzer (also called a packet sniffer or network analyzer - e.g., Wireshark) captures raw packets traveling across a network segment and decodes them for detailed inspection. It is the primary tool for capturing and analyzing traffic between hosts on the same segment.
Question
Which of the following is BEST used to capture and analyze network traffic between hosts on the same network segment?
Options
- AProtocol analyzer
- BRouter
- CFirewall
- DHIPS
How the community answered
(25 responses)- A96% (24)
- C4% (1)
Explanation
A protocol analyzer (also called a packet sniffer or network analyzer - e.g., Wireshark) captures raw packets traveling across a network segment and decodes them for detailed inspection. It is the primary tool for capturing and analyzing traffic between hosts on the same segment. A router (B) forwards traffic between networks and does not capture/analyze packets in detail. A firewall (C) filters traffic based on rules but is not designed for deep packet capture. A HIPS (D) is a host-based intrusion prevention system that monitors a single host, not network-wide segment traffic.
Topics
Community Discussion
No community discussion yet for this question.