Refer to the exhibit. Which of these correctly describes the results of port security violation of an unknown packet? `` Switch(config)#interface fastethernet 0/1 Switch(config-if)#switchport mode…

Question

Switch(config)#interface fastethernet 0/1
Switch(config-if)#switchport mode access
Switch(config-if)#switchport port-security
Switch(config-if)#switchport port-security maximum 3
Switch(config-if)#switchport port-security mac-address sticky
Switch(config-if)#end

Options

• APort enabled; unknown packets dropped; no SNMP or syslog messages
• BPort enabled; unknown packets dropped; SNMP or syslog messages
• CPort disabled; no SNMP or syslog messages
• DPort disabled; SNMP or syslog messages

• A
  7% (3)
• B
  2% (1)
• C
  15% (7)
• D
  76% (35)

Explanation

The configuration does not explicitly set a violation mode using the 'switchport port-security violation' command. When omitted, Cisco switches default to the 'shutdown' violation mode. In shutdown mode, when a packet arrives from an unknown (unauthorized) MAC address - in this case, a 4th MAC address beyond the configured maximum of 3 - the port is placed into an err-disabled state (port disabled), and the switch generates both a syslog message and an SNMP trap notification. This distinguishes it from 'protect' mode (drops packets silently, no messages) and 'restrict' mode (drops packets and sends messages, but keeps port up). Since no violation mode is specified, shutdown is assumed, making D correct.

No community discussion yet for this question.