Which solution monitors traffic based on the configuration of the interface's access control list?

Which solution monitors traffic based on the configuration of the interface's access control list?

• A. Network Tap
• B. ACL-Based Traffic Mirroring
• C. Break and Inspect (TLS/SSL Inspection)
• D. Security Information and Event Management (SIEM) Systems

Answer: (B)

This question hinges on selective traffic monitoring driven by an interface’s access control list. An ACL defines specific rules that permit or deny traffic. When you implement ACL-based traffic mirroring, the monitoring device copies only the traffic that matches those ACL rules to the monitoring port. This lets you observe exactly the traffic of interest without capturing everything on the link, making monitoring focused and efficient.

In contrast, a network tap simply mirrors all traffic flowing through the link without filtering, TLS/SSL inspection is about decrypting and inspecting encrypted content, and SIEM systems collect logs and events rather than mirroring traffic based on ACLs.