CompTIA Network+ (N10-009) — Question 84

A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic. Which of the following should the administrator use?

Answer options

• A. SNMP trap
• B. Port mirroring
• C. Syslog collection
• D. API integration

Correct answer: B

Explanation

The correct answer is B, Port mirroring, which allows the IDS to receive a copy of the network traffic for inspection without interfering with the actual data flow. The other options, such as SNMP trap and Syslog collection, are used for alerting and logging rather than directly monitoring traffic, while API integration is not typically related to traffic inspection.