It is possible to sniff traffic from other hosts on a switched Ethernet network by impersonating which type of network device?

There are three key factors in selecting a biometric mechanism. What are they?

Which of the following is an UDP based protocol?

Which of the following intrusion detection systems (IDS) monitors network traffic and compares it against an established baseline?

You are an Intrusion Detection Analyst and the system has alerted you to an Event of Interest (EOI) that appears to be activity generated by a worm. You investigate and find that the network traffic was normal. How would this type of alert be categorized?