200-101 · Question #149
Refer to the exhibit. Some 2950 series switches are connected to the conference area of the corporate headquarters network. The switches provide two to three jacks per conference room to host laptop…
The correct answer is D. Implement Port Security on all interfaces and use the port-security maximum 1 command to limit port access to a single MAC address. Port Security is the correct feature to prevent hubs (and thus multiple devices) from connecting through a single switch port. The command switchport port-security maximum 1 limits a port to learning only one MAC address. If a hub is plugged in and multiple MAC addresses appear…
Question
Options
- AConfigure static entries in the switch MAC address table to include the range of addresses used by visiting employees.
- BConfigure an ACL to allow only a single MAC address to connect to the switch at one time.
- CUse the mac-address-table 1 global configuration command to limit each port to one source MAC address.
- DImplement Port Security on all interfaces and use the port-security maximum 1 command to limit port access to a single MAC address.
- EImplement Port Security on all interfaces and use the port-security mac-address sticky command to limit access to a single MAC address.
- FImplement Port Security at global configuration mode and use the port-security maximum 1 command to allow each switch only one attached hub.
How the community answered
(29 responses)- A3% (1)
- C3% (1)
- D72% (21)
- E14% (4)
- F7% (2)
Explanation
Port Security is the correct feature to prevent hubs (and thus multiple devices) from connecting through a single switch port. The command switchport port-security maximum 1 limits a port to learning only one MAC address. If a hub is plugged in and multiple MAC addresses appear on that port, the security violation action (shutdown by default) triggers. Option E is incorrect because port-security mac-address sticky alone just dynamically learns and saves the first MAC seen-it does not limit the count to 1 unless maximum 1 is also specified. Options C and F are incorrect because port security is configured at the interface level, not globally, and there is no mac-address-table 1 global command as described.
Topics
Community Discussion
No community discussion yet for this question.