Which device is typically used to passively monitor traffic by copying packets without altering them?

• A. Network Tap
• B. VPC
• C. Break and Inspect
• D. SNMP Manager

Answer: (A)

The concept here is passively duplicating network traffic for analysis without changing it. A network tap is built for this purpose: it is installed on a network link and copies every packet to a separate monitoring path while the original frames continue to their destination untouched. This passive setup means the monitoring tool can capture and analyze traffic without introducing delays, modifications, or disruptions to the live flow, which is essential for accurate diagnostics and forensics. In practice, a tap provides dedicated ports for the link and for the copy sent to the monitoring system, keeping the traffic flow and timing intact.

Other options don’t fit this use. A VPC relates to isolating resources in a cloud environment rather than duplicating live wire traffic. Break and Inspect implies actively intercepting and potentially altering traffic for inspection on the fly, which is not passive. An SNMP Manager gathers device metrics and management information, not raw packet copies for traffic analysis.