exam questions

Exam N10-008 All Questions

View all questions & answers for the N10-008 exam

Exam N10-008 topic 1 question 721 discussion

Actual exam question from CompTIA's N10-008
Question #: 721
Topic #: 1
[All N10-008 Questions]

A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic. Which of the following should the administrator use?

  • A. SNMP trap
  • B. Port mirroring
  • C. Syslog collection
  • D. API integration
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Sarmad_Mansour
11 months, 1 week ago
Selected Answer: B
Port mirroring (also known as SPAN - Switched Port Analyzer) is the process of forwarding a copy of network packets from one port on a network switch to another port, where the packets can be analyzed. In this scenario, the network administrator should use port mirroring to send a copy of the network traffic to the passive IDS (Intrusion Detection System) for inspection without interrupting the normal flow of traffic on the network. This allows the IDS to monitor the network traffic and detect any suspicious or malicious activity.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...