nerdexam
Cisco

200-401 · Question #56

An administrator has connected devices to an industrial switch and, for security reasons, wants the dynamically learned MAC addresses from the address table added to the running configuration. What…

The correct answer is A. Enable port security and use the keyword sticky. Enabling port security with the sticky keyword (Option A) tells the switch to dynamically learn MAC addresses and automatically write them into the running configuration as static secure MAC address entries - exactly what the question asks for. Option B is wrong because trunk…

Implement Industrial Cyber Security

Question

An administrator has connected devices to an industrial switch and, for security reasons, wants the dynamically learned MAC addresses from the address table added to the running configuration. What must be done to accomplish this?

Options

  • AEnable port security and use the keyword sticky.
  • BSet the switchport mode to trunk and save the running configuration.
  • CUse the switchport protected command to have the MAC addresses added to the configuration.
  • DUse the no switchport port-security command to allow MAC addresses to be added to the

How the community answered

(62 responses)
  • A
    76% (47)
  • B
    8% (5)
  • C
    13% (8)
  • D
    3% (2)

Explanation

Enabling port security with the sticky keyword (Option A) tells the switch to dynamically learn MAC addresses and automatically write them into the running configuration as static secure MAC address entries - exactly what the question asks for. Option B is wrong because trunk mode is about VLAN tagging between switches, not MAC address persistence. Option C is wrong because switchport protected is a port isolation feature that prevents traffic between protected ports - it has nothing to do with saving MAC addresses. Option D is wrong because no switchport port-security disables port security entirely, which is the opposite of what's needed.

Memory tip: Think of sticky like a sticky note - it sticks the learned MAC address permanently into your config so it doesn't disappear when the switch reboots.

Topics

#Port Security#Sticky MAC Addresses#MAC Learning#Switch Security

Community Discussion

No community discussion yet for this question.

Full 200-401 Practice