What should a security analyst consider when comparing inline traffic interrogation with traffic tapping to determine which approach to use in the network?
A.
Tapping interrogation replicates signals to a separate port for analyzing traffic
B.
Tapping interrogations detect and block malicious traffic
C.
Inline interrogation enables viewing a copy of traffic to ensure traffic is in compliance with security policies
D.
Inline interrogation detects malicious traffic but does not block the traffic
"A" is correct
A network TAP is a simple device that connects directly to the cabling infrastructure to split or copy packets for use in analysis, security, or general network management
Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide by Omar Santos
In my oppinion Correct is "C"
"A" = SPAN (not TAP)
According to the book:
The following are some key benefits of using a physical inline tap:
It will create a full copy of the network traffic and send it to the security monitoring device.
It does not drop any traffic.
A physical inline tap does not require any sort of configuration.
It is simple to implement on a network.
Most inline taps do not require power for the device to operate.
It does not create any contention on the network.
"C" can´t be the answer because Inline interrogation process the live traffic before it is forwarded, its doesnt process a copy of the traffic. and options B and D are wrong :v
Seems i can prove why A is correct
A. Tapping interrogation replicates SIGNALS to a separate port for analyzing traffic
SPAN does not replicate signals, but packets
upvoted 2 times
...
...
...
This section is not available anymore. Please use the main Exam Page.200-201 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Eng_ahmedyoussef
7 months, 2 weeks agoanonymous1966
10 months agohalamah
1 year, 5 months agoPwned
1 year, 6 months agoalocin
1 year, 7 months agoanonymous1966
1 year, 8 months agoPwned
1 year, 6 months agoRSA001
1 year ago