nerdexam
CompTIA

220-1002 · Question #594

A technician has enabled port security on a switchport. Which of the following BEST describes the effect this will have?

The correct answer is A. Devices must match a list of allowed MAC addresses before accessing the network. Switch port security restricts network access to a port by enforcing a list of permitted MAC addresses, blocking any device whose hardware address is not authorized.

Networking

Question

A technician has enabled port security on a switchport. Which of the following BEST describes the effect this will have?

Options

  • ADevices must match a list of allowed MAC addresses before accessing the network
  • BDevices need to conform to the policies set forth by the MDM software
  • CData loss prevention software will be monitoring for data exfiltration on the port.
  • DA firewall is actively monitoring the network traffic using heuristic analysis.

How the community answered

(19 responses)
  • A
    89% (17)
  • B
    5% (1)
  • C
    5% (1)

Why each option

Switch port security restricts network access to a port by enforcing a list of permitted MAC addresses, blocking any device whose hardware address is not authorized.

ADevices must match a list of allowed MAC addresses before accessing the networkCorrect

Port security is a Layer 2 switch feature that allows administrators to specify which MAC addresses are permitted to communicate through a given port; when an unauthorized device connects, the switch can restrict access, send an alert, or shut down the port depending on the configured violation mode.

BDevices need to conform to the policies set forth by the MDM software

MDM (Mobile Device Management) enforces organizational policies on enrolled endpoints through software agents and operates independently of switch-level port configuration.

CData loss prevention software will be monitoring for data exfiltration on the port.

DLP (Data Loss Prevention) software monitors data transfers at the endpoint or application layer to detect exfiltration and has no relationship to switch port security mechanisms.

DA firewall is actively monitoring the network traffic using heuristic analysis.

Heuristic firewall analysis inspects network traffic content at Layers 3-7 and is unrelated to the MAC address-based access control that port security provides at Layer 2.

Concept tested: Switch port security MAC address-based access control

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_55_se/configuration/guide/scg_2960/swtrafc.html

Topics

#port security#MAC address filtering#switch configuration#network access control

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice