200-301 · Question #810
An administrator has connected devices to a switch and, for security reasons, wants the dynamically learned MAC addresses from the address table added to the running configuration. Which action must b
The correct answer is B. Enable port security and use the keyword sticky.. To dynamically learn MAC addresses and add them to the running configuration for security, port security must be enabled with the sticky keyword.
Question
An administrator has connected devices to a switch and, for security reasons, wants the dynamically learned MAC addresses from the address table added to the running configuration. Which action must be taken to accomplish this?
Options
- AUse theno switchport port-security command to allow MAC addresses to be added to the
- BEnable port security and use the keyword sticky.
- CSet the switchport mode to trunk and save the running configuration.
- DUse theswitchport protectedcommand to have the MAC addresses added to the configuration.
How the community answered
(45 responses)- A11% (5)
- B82% (37)
- C4% (2)
- D2% (1)
Why each option
To dynamically learn MAC addresses and add them to the running configuration for security, port security must be enabled with the sticky keyword.
The no switchport port-security command disables port security, which would prevent the switch from learning or securing MAC addresses, directly contradicting the goal.
Enabling port security with the mac-address sticky command allows the switch to dynamically learn MAC addresses connected to the port and then save these learned addresses as "sticky" secure MAC addresses in the running configuration. These addresses become part of the configuration and persist across reboots if the configuration is saved.
Setting the switchport mode to trunk configures the port for carrying multiple VLANs and has no direct function in dynamically learning MAC addresses and adding them to the running configuration for security purposes.
switchport protected is not a standard command for adding dynamically learned MAC addresses to the configuration. While protected is a port security violation mode option, it does not perform the desired function.
Concept tested: Port security sticky MAC addresses
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/consolidated/configuration_guide/b_consolidated_3se_3850_cg/b_consolidated_3se_3850_cg_chapter_0110111.html#concept_3593B6E4E2C74618BA91799D05F7C733
Topics
Community Discussion
No community discussion yet for this question.