Question from a CEHv9 exam preparation book:
"When scanning a network via a hardline connection to a wired-switch NIC in promiscuous mode, what would be the extent of network traffic you would expect to see? A. Entire network B. VLAN you are attached to C. All nodes attached to the same port D. None"
I went for B but according to the book it's C and I don't get it. What does that even mean "all nodes attached to the same port".
Explanation to the answer from the book
Because each switchport is its own collision domain, only nodes that reside on the same switchport will be seen during a scan.