Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 12
What is a difference between inline traffic interrogation and traffic mirroring?
Answer options
- A. Inline inspection acts on the original traffic data flow
- B. Traffic mirroring passes live traffic to a tool for blocking
- C. Traffic mirroring inspects live traffic for analysis and mitigation
- D. Inline traffic copies packets for analysis and security
Correct answer: A
Explanation
The correct answer, A, highlights that inline inspection directly interacts with the original traffic flow, allowing for immediate action. Options B and C misrepresent the purpose of traffic mirroring, which primarily focuses on analysis rather than blocking or mitigation. Option D incorrectly describes inline traffic as merely copying packets, neglecting its interactive nature.