小規模オフィスのネットワーク管理者は、ネットワーク トラフィックを検査する目的で、パッシブ IDS をネットワーク スイッチに追加しています。管理者は次のうちどれを使用する必要がありますか?
正解:B
This is because port mirroring is a feature that allows a switch to copy the traffic from one or more ports to another port, where a passive IDS can be connected. A passive IDS is a device that monitors the network traffic and detects any malicious or suspicious activity, but does not take any action to block or prevent it. Port mirroring can enable a passive IDS to inspect the network traffic without affecting the performance or availability of the network. The source of this answer is the Cisco ENCOR v1.1 course, module 6, lesson 6.2:
Implementing SPAN, RSPAN, and ERSPAN.