Uses port mirroring to monitor all network traffic and records only VoIP traffic by MAC address?

• A. Data Interception
• B. VoIP Call Tapping
• C. ARP
• D. DHCP starvation attack

Answer: (B)

Port mirroring lets a monitoring device see all the traffic on a switch by duplicating it to a dedicated port. Recording only VoIP traffic by MAC address means you’re filtering that mirrored data to the frames associated with the VoIP devices’ hardware addresses, effectively isolating and capturing VoIP conversations. This combination is the essence of VoIP Call Tapping: you observe the network and selectively record the voice communications.

The other options don’t fit the scenario: Data Interception is too generic and doesn’t emphasize VoIP or MAC-based filtering; ARP concerns mapping IPs to MACs and is not about monitoring VoIP traffic; DHCP starvation attack is a DoS tactic against the DHCP service, unrelated to tapping or recording voice data.