Building-permits security wants a SPAN-like copy of a segment's traffic sent to the city's packet-analyzer VM. Which NSX GUI feature is the NSX method, not a physical ToR SPAN?
Select an answer to reveal the explanation.
Short Explanation
You don't have to recable the basement switch to get a copy of a virtual street. NSX Port Mirroring under Plan & Troubleshoot is the SPAN-like tool for a segment.
Full Explanation
Building-permits security needs a SPAN-like copy of segment traffic to a packet-analyzer VM. NSX Port Mirroring under Plan & Troubleshoot configures that copy for overlay or VLAN segments without recabling a physical ToR SPAN session—the NSX method for civic packet capture toward an analyzer. Identity Firewall is incorrect: AD groups drive user-based firewall identity; they are not a prerequisite concept for port mirroring sessions. System > Fabric > Compute Managers registers vCenter for inventory; it does not create SPAN/mirror sessions. Networking > VPN (IPsec) encrypts site or remote access tunnels; mirrors are not defined as IPsec tunnels to the analyzer. Exam caveat: mirroring can duplicate sensitive municipal traffic—limit session scope, protect the analyzer, and disable sessions after the investigation per retention policy. Operational check: create a Port Mirroring session for the permits segment to the analyzer VM, verify packets arrive, capture only the approved window, then disable the session and note start/stop times in the security ticket. Prefer mirroring only the permits segment and TCP ports under investigation; coordinate with the city’s packet-analyzer owners so storage and chain-of-custody for municipal traffic meet audit expectations before the session is left enabled overnight.