What is the difference between inline traffic interrogation (TAPS) and traffic mirroring (SPAN)?

A. SPAN ports filter out physical layer errors, making some types of analyses more difficult, and TAPS receives all packets, including physical errors.

B. TAPS replicates the traffic to preserve integrity, and SPAN modifies packets before sending them to other analysis tools.

C. TAPS interrogation is more complex because traffic mirroring applies additional tags to data, and SPAN does not alter integrity and provides full visibility within full-duplex networks.

D. SPAN results in more efficient traffic analysis, and TAPS is considerably slower due to latency caused by mirroring.








 

Suggested Answer: A

Reference:
https://insights.profitap.com/tap-vs-span

This question is in 200-201 Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) Exam
For getting Cisco Certified CyberOps Associate Certificate



Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Cisco.
Trademarks, certification & product names are used for reference only and belong to Cisco.
The website does not contain actual questions and answers from Cisco's Certification Exam.