CND Network Perimeter Protection Practice Question

Which TWO deployment methods or modes are commonly used to collect traffic for a Network Intrusion Detection System (NIDS)? (Choose TWO)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Optical Network Tap (Test Access Point)

NIDS sensors are deployed passively using switch SPAN/mirror ports or optical network taps.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Optical Network Tap (Test Access Point)
Why this is correct
An optical tap splits light on fiber links to send a passive copy to the NIDS.
✗
Inline active blocking mechanism that terminates malicious TCP sessions directly
Why it's wrong here
Active inline blocking is performed by an IPS, not a passive NIDS.
✗
Directly modifying the TCP/IP stack of external client operating systems
Why it's wrong here
Security teams do not control external client OS stacks.
✓
Switch Port Analyzer (SPAN) or Mirror Port
Why this is correct
SPAN ports copy traffic from other ports and send it to the NIDS sensor.
✗
Using DHCP broadcast packets to rewrite routing tables
Why it's wrong here
DHCP broadcasts do not collect traffic for intrusion detection.

About these practice questions

This CND question is part of Courseiva's 323-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official EC-Council exam blueprint

Ready to practise?

Put this into practice with a full scored session.

Start practice session

Scored practice sessions

Quick scored rounds with instant marking and a written explanation per question.

Free CND Practice Test 3 — 30 Questions→CND Practice Exam 3 — 20 Questions→

Domain-focused practice

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Network Perimeter Protection Network Defense Management Network Security Controls Protocols And Devices

Practice by scenario

Pick a question style and work only that format until it feels routine.

Browse scenarios

Topic-level practice

Each topic page collects the questions that test one concept, plus the theory behind it.

Network Perimeter Protection practice questions CND scenario practice questions Incident Detection Response And Threat Prediction practice questions Network Attacks And Defense Strategies practice questions

Keep going

Exam domains Study guide All EC-Council practice questions

This CND practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CND exam.