Refer to the exhibit. The following commands are executed on interface fa0/1 of 2950 Switch. `` 2950Switch(config-if)# switchport port-security 2950Switch(config-if)# switchport port-security…

Question

2950Switch(config-if)# switchport port-security
2950Switch(config-if)# switchport port-security mac-address sticky
2950Switch(config-if)# switchport port-security maximum 1

Options

• AThe MAC address table will now have an additional entry of fa0/1 FFFF.FFFF.FFFF.
• BOnly host A will be allowed to transmit frames on fa0/1.
• CThis frame will be discarded when it is received by 2950Switch.
• DAll frames coming into 2950Switch with a destination of 0000.00aa.aaaa will be forwarded out fa0/1.
• EHosts B and C may forward frames out fa0/1 but frames arriving from other switches will not be forwarded out fa0/1.
• FOnly frames from source 0000.00bb.bbbb, the first learned MAC address of 2950Switch, will be forwarded out fa0/1.

• A
  12% (4)
• B
  73% (24)
• C
  3% (1)
• E
  3% (1)
• F
  9% (3)

Explanation

When the frame from Host A (source MAC 0000.00aa.aaaa) arrives on fa0/1, two things happen: (B) Because 'maximum 1' is set and sticky learning is enabled, the switch locks fa0/1 to the first MAC it learns - Host A's address (0000.00aa.aaaa). Any subsequent frames arriving on fa0/1 from a different source MAC will violate port security, meaning only Host A is permitted to transmit on that port. (D) The switch also learns that 0000.00aa.aaaa is reachable via fa0/1 and adds this to the MAC address table. Therefore, any frame arriving at the switch destined for 0000.00aa.aaaa will be forwarded out fa0/1. The other choices are incorrect: A is wrong because fa0/1 learns the unicast source MAC, not FFFF.FFFF.FFFF (broadcast). C is wrong because the frame is valid and will be processed. E and F misrepresent how port security and forwarding work.

No community discussion yet for this question.