Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 199

What is the difference between inline traffic interrogation and traffic mirroring?

Answer options

• A. Inline replicates the traffic to preserve integrity rather than modifying packets before sending them to other analysis tools.
• B. Traffic mirroring results in faster traffic analysis and inline is considerably slower due to latency.
• C. Inline interrogation is less complex as traffic mirroring applies additional tags to data.
• D. Traffic mirroring copies the traffic rather than forwarding it directly to the analysis tools.

Correct answer: D

Explanation

The correct answer is D because traffic mirroring involves copying the traffic for analysis, whereas inline traffic interrogation processes the traffic directly. Options A and C are incorrect as they misconstrue the nature of inline traffic interrogation, and option B is wrong since the speed of analysis depends on the specific implementation rather than being inherently faster for mirroring.