CNFE Practice Questions - Mile2 Certified Network Forensics Examiner (CNFE) Exam

Access More Questions

An investigator wants to capture all traffic on a switched network segment without modifying the suspect system. Which hardware-based method is most appropriate?

Installing Wireshark on the suspect workstation Enabling port mirroring (SPAN) on the managed switch Inserting a passive network tap on the wire between the switch and the suspect host Configuring a software bridge on a third-party laptop

Correct Answer:

Inserting a passive network tap on the wire between the switch and the suspect host

Access more questions from this quiz

Continue to CNFE Practice Questions - Mile2 Certified Network Forensics Examiner (CNFE) Exam for more practice questions and the full quiz experience.

Access More Questions