CompTIA Network+ Practice Test

What is a defining characteristic of port mirroring?

1. It is hardware-dependent

2. It captures network traffic from a specific port

3. It can analyze packet payloads

4. It requires dedicated devices for setup

The correct answer is: It captures network traffic from a specific port

Port mirroring, also known as SPAN (Switched Port Analyzer), is primarily characterized by its ability to capture and copy network traffic from a specific port or VLAN on a switch to a designated monitoring port. This allows network administrators to analyze the traffic without affecting the normal operation of the dataset being monitored. By directing the mirrored traffic to a monitoring device, such as a network analyzer or intrusion detection system, administrators can troubleshoot issues or monitor the performance of their network in real-time. It is a vital tool in network management, enabling users to gain insights into the behavior of devices connected to specific ports. Contrasting with other considerations, port mirroring is not inherently hardware-dependent, as many modern switches support this feature without requiring specific hardware configurations. While it can facilitate the analysis of packet payloads, its defining characteristic lies in the fact that it specifically targets traffic flowing through a particular port. Additionally, it does not necessitate dedicated devices for its implementation; standard networking devices can often be utilized for the mirroring process.