DailyDebian on Instagram: "Correct Answer: B. Port mirroring. A passive IDS must receive a copy of network traffic without interfering with packet flow. Port mirroring, also known as SPAN, duplicates traffic from one or more switch ports to a designated monitoring port where the IDS can inspect packets. Why The Other Options Are Incorrect: A. SNMP trap. SNMP traps are asynchronous alerts sent by network devices to management systems. They provide event notifications, not raw packet data for traf