Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CompTIA N10-009 Exam - Topic 3 Question 6 Discussion

A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic. Which of the following should the administrator use?
B) Port mirroring
A) SNMP trap
C) Syslog collection
D) API integration

CompTIA N10-009 Exam - Topic 3 Question 6 Discussion

Actual exam question for CompTIA's N10-009 exam
Question #: 6
Topic #: 3
[All N10-009 Questions]

A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic. Which of the following should the administrator use?

Show Suggested Answer Hide Answer
Suggested Answer: B

Port mirroring, also known as SPAN (Switched Port Analyzer), is used to send a copy of network packets seen on one switch port (or an entire VLAN) to another port where the IDS is connected. This allows the IDS to passively inspect network traffic without interfering with the actual traffic flow. Port mirroring is an essential feature for implementing IDS in a network for traffic analysis and security monitoring. Reference: CompTIA Network+ study materials.


Contribute your Thoughts:

0/2000 characters
Sabrina
10 months ago
SNMP trap is not the right choice here, just saying.
upvoted 0 times
...
Lonna
10 months ago
Wait, isn't Port mirroring a bit outdated?
upvoted 0 times
...
Reid
10 months ago
API integration? Seems a bit off for this scenario.
upvoted 0 times
...
Aleisha
10 months ago
I think Syslog collection could work too, but not ideal.
upvoted 0 times
...
Rene
11 months ago
Definitely going with Port mirroring for this!
upvoted 0 times
...
Quinn
11 months ago
API integration seems off for this scenario, but I can't recall exactly why. I guess I'll stick with port mirroring as my guess.
upvoted 0 times
...
Tamra
11 months ago
I practiced a similar question where port mirroring was the answer too, so I’m leaning towards that option.
upvoted 0 times
...
Wilda
11 months ago
I'm not entirely sure, but I remember something about SNMP traps being more for alerts rather than traffic inspection.
upvoted 0 times
...
Roxane
11 months ago
I think port mirroring is the right choice here since it allows the IDS to see all the traffic without interfering with it.
upvoted 0 times
...
Donte
11 months ago
Port mirroring is the clear winner in this case. It's the most common and effective way to monitor network traffic with a passive IDS.
upvoted 0 times
...
Geoffrey
11 months ago
I'm a little confused by the options. I'll need to review the differences between SNMP traps, syslog, and API integration to figure out the best approach.
upvoted 0 times
...
Naomi
11 months ago
Port mirroring is definitely the right choice here. That's the standard way to set up a passive IDS on a network switch.
upvoted 0 times
...
Kristofer
11 months ago
Hmm, I'm not totally sure about this one. I'll have to think it through carefully before deciding.
upvoted 0 times
...
Mabelle
11 months ago
This seems pretty straightforward. I think port mirroring is the way to go for a passive IDS setup.
upvoted 0 times
...
Eileen
12 months ago
This question seems straightforward - it's asking about the purpose of job evaluation, so I'll focus on the key aspects like creating a job hierarchy, describing job content and requirements, and illustrating how jobs fit together.
upvoted 0 times
...
Shaquana
2 years ago
B all the way! I can already see the network admin trying to 'mirror' the entire office through the vents. That would be hilarious!
upvoted 0 times
Haydee
2 years ago
B) Port mirroring
upvoted 0 times
...
Eden
2 years ago
Haha, that would be funny to watch!
upvoted 0 times
...
Annita
2 years ago
B) Port mirroring
upvoted 0 times
...
...
Buddy
2 years ago
Definitely going with B. Port mirroring is the way to go when you want to keep an eye on things without causing any trouble.
upvoted 0 times
Kenny
2 years ago
Port mirroring is definitely the most efficient way to inspect network traffic without disrupting the network.
upvoted 0 times
...
Merri
2 years ago
SNMP trap could also be useful for monitoring network devices remotely.
upvoted 0 times
...
Lisbeth
2 years ago
I agree, port mirroring is the best option for monitoring network traffic.
upvoted 0 times
...
...
Bambi
2 years ago
I believe port mirroring is the most effective option because it copies all traffic to another port for analysis.
upvoted 0 times
...
Loreen
2 years ago
I'm not sure, but I think SNMP trap could also be a good choice.
upvoted 0 times
...
Yoko
2 years ago
I'm torn between B and D. API integration could give you more granular control, but port mirroring is the tried and true method.
upvoted 0 times
...
Trevor
2 years ago
I agree with Lettie, port mirroring is the best option for inspecting network traffic.
upvoted 0 times
...
Audrie
2 years ago
Port mirroring for sure! That's the classic way to monitor network traffic without disrupting the flow.
upvoted 0 times
Irving
2 years ago
It's a common practice for network administrators to use port mirroring for passive IDS.
upvoted 0 times
...
Willie
2 years ago
I agree, it allows you to inspect the traffic without affecting the flow.
upvoted 0 times
...
Mike
2 years ago
Port mirroring is definitely the way to go for monitoring network traffic.
upvoted 0 times
...
Pamella
2 years ago
It's a common practice for network administrators to use port mirroring for passive IDS.
upvoted 0 times
...
Leota
2 years ago
I agree, it allows you to see all the traffic without affecting the network.
upvoted 0 times
...
Vilma
2 years ago
Port mirroring is definitely the way to go for monitoring network traffic.
upvoted 0 times
...
...
Lettie
2 years ago
I think the administrator should use port mirroring.
upvoted 0 times
...

Save Cancel