Please give two liner answers for following short questions for upvote.

1. What is a switch's CAM table?

2. How can switch CAM table be used to collect network forensic evidence?

3. How can port mirroring be used to collect network forensic evidence?

4. What is a TAP (Test Access Port)?

5. What is a SPAN port mirror?

6. What are the forensic advantages of using TAP ports?

7. List three limitations of using switches for collecting Network Forensic Evidence?

8. What is a MAC Flooding attack?

9. How can one prevent a MAC flooding attack against a switch?

10. What is difference between a switch's console port and a management port??