nerdexam
Cisco

200-101 · Question #149

Refer to the exhibit. Some 2950 series switches are connected to the conference area of the corporate headquarters network. The switches provide two to three jacks per conference room to host laptop…

The correct answer is D. Implement Port Security on all interfaces and use the port-security maximum 1 command to limit port access to a single MAC address. Port Security is the correct feature to prevent hubs (and thus multiple devices) from connecting through a single switch port. The command switchport port-security maximum 1 limits a port to learning only one MAC address. If a hub is plugged in and multiple MAC addresses appear…

Operate a Medium-Sized Switched Network

Question

Refer to the exhibit. Some 2950 series switches are connected to the conference area of the corporate headquarters network. The switches provide two to three jacks per conference room to host laptop connections for employees who visit the headquarters office. When large groups of employees come from other locations, the network administrator often finds that hubs that have connected to wall jacks in the conference area although the ports on the access layer switches were not intended to support multiple workstations. What action could the network administrator take to prevent access by multiple laptops through a single switch port and still leave the switch functional for its intended use?

Options

  • AConfigure static entries in the switch MAC address table to include the range of addresses used by visiting employees.
  • BConfigure an ACL to allow only a single MAC address to connect to the switch at one time.
  • CUse the mac-address-table 1 global configuration command to limit each port to one source MAC address.
  • DImplement Port Security on all interfaces and use the port-security maximum 1 command to limit port access to a single MAC address.
  • EImplement Port Security on all interfaces and use the port-security mac-address sticky command to limit access to a single MAC address.
  • FImplement Port Security at global configuration mode and use the port-security maximum 1 command to allow each switch only one attached hub.

How the community answered

(29 responses)
  • A
    3% (1)
  • C
    3% (1)
  • D
    72% (21)
  • E
    14% (4)
  • F
    7% (2)

Explanation

Port Security is the correct feature to prevent hubs (and thus multiple devices) from connecting through a single switch port. The command switchport port-security maximum 1 limits a port to learning only one MAC address. If a hub is plugged in and multiple MAC addresses appear on that port, the security violation action (shutdown by default) triggers. Option E is incorrect because port-security mac-address sticky alone just dynamically learns and saves the first MAC seen-it does not limit the count to 1 unless maximum 1 is also specified. Options C and F are incorrect because port security is configured at the interface level, not globally, and there is no mac-address-table 1 global command as described.

Topics

#port security#MAC address limiting#port-security maximum#switch security

Community Discussion

No community discussion yet for this question.

Full 200-101 Practice