nerdexam
Cisco

200-101 · Question #189

A network administrator needs to configure port security on a switch. Which two statements are true? (Choose two.)

The correct answer is C. When dynamic MAC address learning is enabled on an interface, the switch can learn new addresses, up to the maximum defined. D. The sticky learning feature allows the addition of dynamically learned addresses to the running configuration.. Port security can only be applied to static access ports or trunk ports - it cannot be applied to dynamic access ports (A is false) or EtherChannels (B is false). When dynamic MAC address learning is enabled, the switch learns source MAC addresses up to the configured maximum, ma

Operate a Medium-Sized Switched Network

Question

A network administrator needs to configure port security on a switch. Which two statements are true? (Choose two.)

Options

  • AThe network administrator can apply port security to dynamic access ports.
  • BThe network administrator can apply port security to EtherChannels.
  • CWhen dynamic MAC address learning is enabled on an interface, the switch can learn new addresses, up to the maximum defined.
  • DThe sticky learning feature allows the addition of dynamically learned addresses to the running configuration.
  • EThe network administrator can configure static secure or sticky secure MAC addresses in the voice VLAN.

How the community answered

(70 responses)
  • A
    1% (1)
  • B
    1% (1)
  • C
    93% (65)
  • E
    4% (3)

Explanation

Port security can only be applied to static access ports or trunk ports - it cannot be applied to dynamic access ports (A is false) or EtherChannels (B is false). When dynamic MAC address learning is enabled, the switch learns source MAC addresses up to the configured maximum, making C true. The sticky learning feature (port-security mac-address sticky) causes dynamically learned MAC addresses to be written into the running configuration as if they were statically configured, making D true. Port security cannot be configured on voice VLANs (E is false).

Topics

#port security#sticky MAC#dynamic MAC learning#switch security

Community Discussion

No community discussion yet for this question.

Full 200-101 Practice