Halloween Special 2026! Get Up to 25% OFF Practice Questions! Limited Time - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council ICS-SCADA Exam - Topic 6 Question 13 Discussion

Posted by Marjory on Aug 24, 2024 at 06:45 AM

Which of the following is considered the best way to counter packet monitoring for a switch?

Suggested Answer: D

Port mirroring (also known as SPAN - Switched Port Analyzer) is considered one of the best ways to counter packet monitoring on a switch. This technique involves copying traffic from one or more switch ports (or an entire VLAN) to another port where the monitoring device is connected. Port mirroring allows administrators to monitor network traffic in a non-intrusive way, as it does not affect network performance and is transparent to users and endpoints on the network. Reference:

Cisco Systems, 'Catalyst Switched Port Analyzer (SPAN) Configuration Example'.


Get Premium ICS-SCADA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
29 comments · newest first
SO
Socorro 11 months ago
I had no idea SPAN was the top choice!
NE
Nenita 11 months ago
Duplication can be useful too, but SPAN is more common.
AZ
Azzie 11 months ago
Wait, isn't port mirroring just as good?
JO
Josefa 12 months ago
Totally agree, SPAN is super effective!
VE
Veta 12 months ago
I think SPAN is the best option here.
PA
Paris 1 year ago
I have a vague memory of tap being used for monitoring, but I thought it was less effective than SPAN.
PE
Penney 1 year ago
I'm leaning towards duplication, but I feel like I might be mixing it up with something else we covered.
DO
Dortha 1 year ago
I remember practicing a similar question, and I think port mirroring was mentioned as a good option too. But I can't recall the specifics.
JU
Julio 1 year ago
I think SPAN is the right answer, but I'm not completely sure. We discussed it in class, and it seemed like the most effective method.
MY
My 1 year ago
Okay, I think I've got it. SPAN, or Switched Port Analyzer, is the industry-standard way to monitor traffic on a switch without being detected.
DA
Daniel 1 year ago
I'm a bit confused on the difference between tap, duplication, and port mirror. I'll need to review those concepts again.
TE
Tequila 1 year ago
Hmm, this seems like a tricky one. I'll need to think through the different options carefully.
AL
Alyce 1 year ago
I'm pretty sure SPAN is the best way to counter packet monitoring on a switch. I remember learning about that in class.
VI
Vivienne 1 year ago
Hmm, I'm a bit confused by the different options. I'll need to review the details of each solution to understand the trade-offs.
ME
Melda 1 year ago
Hmm, I'm not totally sure about this one. I know that fixed costs stay the same as volume increases, but I'm not confident about the per unit change part. I'll have to think this through a bit more.
AI
Ailene 2 years ago
D) Port mirror, hands down. It's like having a personal bodyguard for your network traffic.
VI
Vincent 2 years ago
B) Duplication, baby! Gotta love those sweet, sweet redundant packets.
BR
Brianne 2 years ago
I prefer using Tap as it can also be a reliable method.
JA
Janine 2 years ago
C) SPAN all the way! I mean, who needs those pesky taps and port mirrors when you can just mirror the whole darn port?
MA
Marvel 2 years ago
↳ replying to Janine
D) Port mirror
HE
Hershel 2 years ago
↳ replying to Janine
A) Tap
CH
Cheryl 2 years ago
↳ replying to Janine
C) SPAN is definitely the way to go. It's much more efficient than the other options.
MI
Millie 2 years ago
↳ replying to Janine
D) Port mirror
RO
Rosalind 2 years ago
↳ replying to Janine
C) SPAN
KE
Kenny 2 years ago
↳ replying to Janine
B) Duplication
NI
Nicholle 2 years ago
↳ replying to Janine
A) Tap
MA
Marcelle 2 years ago
I believe SPAN is also a good option to counter packet monitoring.
JA
Jacob 2 years ago
I agree with Sanjuana, Port mirror is the most effective.
SA
Sanjuana 2 years ago
I think the best way is to use Port mirror.
0/2000 characters

Save Cancel