200-301 · Question #314
A port security violation has occurred on a switch port due to the maximum MAC address count being exceeded Which command must be configured to increment the security-violation count and forward an SN
The correct answer is C. switchport port-security violation restrict. To configure a switch port to increment the security-violation count and forward an SNMP trap when the maximum MAC address count is exceeded, use the switchport port-security violation restrict command.
Question
A port security violation has occurred on a switch port due to the maximum MAC address count being exceeded Which command must be configured to increment the security-violation count and forward an SNMP trap?
Options
- Aswitchport port-security violation access
- Bswitchport port-security violation protect
- Cswitchport port-security violation restrict
- Dswitchport port-security violation shutdown
How the community answered
(63 responses)- A2% (1)
- B2% (1)
- C92% (58)
- D5% (3)
Why each option
To configure a switch port to increment the security-violation count and forward an SNMP trap when the maximum MAC address count is exceeded, use the `switchport port-security violation restrict` command.
`access` is a port mode (e.g., `switchport mode access`), not a valid port security violation mode.
The `protect` violation mode drops unauthorized packets but does not increment the violation counter or send SNMP traps.
The `restrict` violation mode drops unauthorized packets, increments the security-violation counter, and generates an SNMP trap, providing notification without disabling the port.
The `shutdown` violation mode immediately disables the port when a violation occurs, sending an SNMP trap, but requires manual intervention to re-enable.
Concept tested: Cisco port security violation modes
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12_2_55_se/configuration/guide/scg/swportsec.html
Topics
Community Discussion
No community discussion yet for this question.