Capture All Traffic on a Single Subnet: Best Solution for Network Traffic Captures

Best Solution for Network Traffic Captures

Prev Question Next Question

Question

A network technician is assisting the security team with some traffic captures.

The security team wants to capture all traffic on a single subnet between the router and the core switch.

To do so, the team must ensure there is only a single collision and broadcast domain between the router and the switch from which they will collect traffic.

Which of the following should the technician install to BEST meet the goal?

A.

Bridge B.

Crossover cable C.

Hub D.

Media converter.

C.

Explanations

A network technician is assisting the security team with some traffic captures.

The security team wants to capture all traffic on a single subnet between the router and the core switch.

To do so, the team must ensure there is only a single collision and broadcast domain between the router and the switch from which they will collect traffic.

Which of the following should the technician install to BEST meet the goal?

A.

Bridge

B.

Crossover cable

C.

Hub

D.

Media converter.

C.

The security team's goal is to capture all traffic on a single subnet between the router and the core switch while ensuring that there is only a single collision and broadcast domain between them. To accomplish this, the network technician must choose the right device that can meet these requirements. Let's examine the options provided:

A. Bridge: A bridge is a device that connects two or more network segments together and forwards traffic between them. It works at the data link layer of the OSI model and creates a single network segment. However, it does not limit the collision or broadcast domains, and hence it is not a suitable device for the security team's goal.

B. Crossover cable: A crossover cable is used to connect two devices of the same type, such as two switches or two routers, without using a hub or a switch. In this case, the network technician needs to capture traffic between the router and the core switch, so a crossover cable is not appropriate.

C. Hub: A hub is a simple device that connects multiple devices on a network and forwards packets between them. All the devices connected to a hub share the same collision and broadcast domain, which is not suitable for the security team's goal. Therefore, a hub is not the best option.

D. Media converter: A media converter is a device that converts signals from one media type to another, such as from copper to fiber optic. While media converters do not affect collision domains, they can create separate broadcast domains. However, media converters are not suitable for this scenario, as they do not connect multiple devices.

Thus, the best option for the network technician to install would be a switch. A switch is a device that connects multiple devices on a network and forwards packets between them. It operates at the data link layer of the OSI model and creates separate collision and broadcast domains. By installing a switch between the router and the core switch, the network technician can ensure that there is only a single collision and broadcast domain between them, making it the best option for the security team's goal.