Eccouncil ICS-SCADA Exam - Topic 6 Question 13 Discussion

Actual exam question for Eccouncil's ICS-SCADA exam

Question #: 13
Topic #: 6

[All ICS-SCADA Questions]

Which of the following is considered the best way to counter packet monitoring for a switch?

ATap

BDuplication

CSPAN

DPort mirror

Show Suggested Answer

Suggested Answer: D

Port mirroring (also known as SPAN - Switched Port Analyzer) is considered one of the best ways to counter packet monitoring on a switch. This technique involves copying traffic from one or more switch ports (or an entire VLAN) to another port where the monitoring device is connected. Port mirroring allows administrators to monitor network traffic in a non-intrusive way, as it does not affect network performance and is transparent to users and endpoints on the network. Reference:

Cisco Systems, 'Catalyst Switched Port Analyzer (SPAN) Configuration Example'.

by Marjory at Aug 24, 2024, 06:45 AM

Limited Time Offer

25%

Off

Get Premium ICS-SCADA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Socorro

9 months ago

I had no idea SPAN was the top choice!

upvoted 0 times

...

Nenita

9 months ago

Duplication can be useful too, but SPAN is more common.

upvoted 0 times

...

Azzie

10 months ago

Wait, isn't port mirroring just as good?

upvoted 0 times

...

Josefa

10 months ago

Totally agree, SPAN is super effective!

upvoted 0 times

...

Veta

10 months ago

I think SPAN is the best option here.

upvoted 0 times

...

Paris

10 months ago

I have a vague memory of tap being used for monitoring, but I thought it was less effective than SPAN.

upvoted 0 times

...

Penney

11 months ago

I'm leaning towards duplication, but I feel like I might be mixing it up with something else we covered.

upvoted 0 times

...

Dortha

11 months ago

I remember practicing a similar question, and I think port mirroring was mentioned as a good option too. But I can't recall the specifics.

upvoted 0 times

...

Julio

11 months ago

I think SPAN is the right answer, but I'm not completely sure. We discussed it in class, and it seemed like the most effective method.

upvoted 0 times

...

My

11 months ago

Okay, I think I've got it. SPAN, or Switched Port Analyzer, is the industry-standard way to monitor traffic on a switch without being detected.

upvoted 0 times

...

Daniel

11 months ago

I'm a bit confused on the difference between tap, duplication, and port mirror. I'll need to review those concepts again.

upvoted 0 times

...

Tequila

11 months ago

Hmm, this seems like a tricky one. I'll need to think through the different options carefully.

upvoted 0 times

...

Alyce

11 months ago

I'm pretty sure SPAN is the best way to counter packet monitoring on a switch. I remember learning about that in class.

upvoted 0 times

...

Vivienne

11 months ago

Hmm, I'm a bit confused by the different options. I'll need to review the details of each solution to understand the trade-offs.

upvoted 0 times

...

Melda

11 months ago

Hmm, I'm not totally sure about this one. I know that fixed costs stay the same as volume increases, but I'm not confident about the per unit change part. I'll have to think this through a bit more.

upvoted 0 times

...