John is moving his companys network from a traditional configuration to aswitched environment. How does this affect the companys IDS?
A.
Network IDS sensors cannot access traffic on port to port communication.
B.
John will need to tear down the spanning port so the IDS can "listen" to alltraffic.
C.
John no longer needs sensors on each and every network segment.
D.
Broadcast data will now be available to all IDS sensors.
Explanation:
A monitoring console monitors all sensors and supplies the networkstaff with an overview of the activities of all of the sensors in the network. Adifficulty arises in a switched environment, where traffic is forwarded throughvirtual private connection, and is not re-broadcast to all the ports. The switchshould have a management port, where all traffic on that switch can be mirrored toone port where the sensor is placed. (This is also referred to as a spanning port,where all traffic from all ports can be mirrored to one port.)