200-101 · Question #199
Which set of commands is recommended to prevent the use of a hub in the access layer?
The correct answer is C. switch(config-if)#switchport mode access switch(config-if)#switchport port-security maximum 1. A hub forwards traffic from multiple devices through a single uplink port, meaning the switch port connected to a hub will see MAC addresses from all devices behind it. To prevent hub usage, configure the port as an access port ('switchport mode access') and limit it to a…
Question
Options
- Aswitch (config-if)#switchport mode trunk switch (config-if)#switchport port-security maximum 1
- Bswitch(config-if)#switchport mode trunk switch(config-if)#switchport port-security mac-address 1
- Cswitch(config-if)#switchport mode access switch(config-if)#switchport port-security maximum 1
- Dswitch(config-if)#switchport mode access switch(config-if)#switchport port-security mac-address 1
How the community answered
(28 responses)- A4% (1)
- B7% (2)
- C89% (25)
Explanation
A hub forwards traffic from multiple devices through a single uplink port, meaning the switch port connected to a hub will see MAC addresses from all devices behind it. To prevent hub usage, configure the port as an access port ('switchport mode access') and limit it to a maximum of one MAC address ('switchport port-security maximum 1'). If a hub is plugged in, multiple MAC addresses will appear on the port, violating the port-security policy and causing the port to err-disable. Trunk mode (options A and B) is inappropriate for access layer endpoints. Option D specifies a static MAC address, which prevents any device other than a pre-defined one from connecting-this is more restrictive than needed and impractical for general use.
Topics
Community Discussion
No community discussion yet for this question.