CompTIA Network+ Practice Test

What type of tap can disconnect the link to insert a packet capture device?

1. Active tap

2. Passive tap

3. Software tap

4. Port mirror

The correct answer is: Active tap

The active tap is designed to allow for the insertion of a packet capture device into a network link without interrupting the data flow. It actively manages the connection and can break the link on command, making it possible to connect or disconnect devices for monitoring or capturing data packets. This capability is crucial for capturing traffic without causing downtime or data loss during the monitoring process. In comparison, a passive tap mirrors data from the connection without being able to interrupt the traffic flow; it simply takes a copy of the packets as they pass through. Therefore, it cannot be used to disconnect a link for inserting a monitoring device. A software tap refers to techniques that operate at the software level, typically through virtualized environments, and does not involve physical connection manipulation. Port mirroring is a feature often found in managed switches that allows for traffic to be copied to a designated port for analysis but does not involve disconnecting the link for inserting capture devices.