Which technique connects a network analyzer to a device by creating a GRE tunnel for traffic monitoring?

Study for the CompTIA SecurityX Test. Equip yourself with comprehensive flashcards and multiple choice questions that include hints and explanations. Gear up for your certification exam!

Multiple Choice

Which technique connects a network analyzer to a device by creating a GRE tunnel for traffic monitoring?

Explanation:
Remote traffic mirroring enables off-device traffic analysis by sending a copy of the device’s traffic through a tunnel to a network analyzer located elsewhere. The traffic is encapsulated in a GRE tunnel, which carries the mirrored frames across the IP network to the analyzer, where they are decapsulated and analyzed. This approach is ideal when you need to monitor traffic remotely or non-inline, without placing the analyzer directly on the switch. SPAN or Mirrored Port is typically used for local monitoring on the same switch, not across a network, so it doesn’t involve a GRE tunnel. Local Traffic Mirroring serves a similar local purpose. Traffic Mirroring is a broad term that doesn’t specify remote transport or tunneling.

Remote traffic mirroring enables off-device traffic analysis by sending a copy of the device’s traffic through a tunnel to a network analyzer located elsewhere. The traffic is encapsulated in a GRE tunnel, which carries the mirrored frames across the IP network to the analyzer, where they are decapsulated and analyzed. This approach is ideal when you need to monitor traffic remotely or non-inline, without placing the analyzer directly on the switch.

SPAN or Mirrored Port is typically used for local monitoring on the same switch, not across a network, so it doesn’t involve a GRE tunnel. Local Traffic Mirroring serves a similar local purpose. Traffic Mirroring is a broad term that doesn’t specify remote transport or tunneling.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy