Which technique connects a network analyzer to a device by creating a GRE tunnel for traffic monitoring?

Get ready for the CompTIA SecurityX exam! Study with multiple choice questions, each crafted to enhance understanding and confidence for your certification journey. Successfully navigate every section to achieve your goal!

Multiple Choice

Which technique connects a network analyzer to a device by creating a GRE tunnel for traffic monitoring?

Explanation:
Remote traffic mirroring enables off-device traffic analysis by sending a copy of the device’s traffic through a tunnel to a network analyzer located elsewhere. The traffic is encapsulated in a GRE tunnel, which carries the mirrored frames across the IP network to the analyzer, where they are decapsulated and analyzed. This approach is ideal when you need to monitor traffic remotely or non-inline, without placing the analyzer directly on the switch. SPAN or Mirrored Port is typically used for local monitoring on the same switch, not across a network, so it doesn’t involve a GRE tunnel. Local Traffic Mirroring serves a similar local purpose. Traffic Mirroring is a broad term that doesn’t specify remote transport or tunneling.

Remote traffic mirroring enables off-device traffic analysis by sending a copy of the device’s traffic through a tunnel to a network analyzer located elsewhere. The traffic is encapsulated in a GRE tunnel, which carries the mirrored frames across the IP network to the analyzer, where they are decapsulated and analyzed. This approach is ideal when you need to monitor traffic remotely or non-inline, without placing the analyzer directly on the switch.

SPAN or Mirrored Port is typically used for local monitoring on the same switch, not across a network, so it doesn’t involve a GRE tunnel. Local Traffic Mirroring serves a similar local purpose. Traffic Mirroring is a broad term that doesn’t specify remote transport or tunneling.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy