220-1002 · Question #594
A technician has enabled port security on a switchport. Which of the following BEST describes the effect this will have?
The correct answer is A. Devices must match a list of allowed MAC addresses before accessing the network. Switch port security restricts network access to a port by enforcing a list of permitted MAC addresses, blocking any device whose hardware address is not authorized.
Question
A technician has enabled port security on a switchport. Which of the following BEST describes the effect this will have?
Options
- ADevices must match a list of allowed MAC addresses before accessing the network
- BDevices need to conform to the policies set forth by the MDM software
- CData loss prevention software will be monitoring for data exfiltration on the port.
- DA firewall is actively monitoring the network traffic using heuristic analysis.
How the community answered
(19 responses)- A89% (17)
- B5% (1)
- C5% (1)
Why each option
Switch port security restricts network access to a port by enforcing a list of permitted MAC addresses, blocking any device whose hardware address is not authorized.
Port security is a Layer 2 switch feature that allows administrators to specify which MAC addresses are permitted to communicate through a given port; when an unauthorized device connects, the switch can restrict access, send an alert, or shut down the port depending on the configured violation mode.
MDM (Mobile Device Management) enforces organizational policies on enrolled endpoints through software agents and operates independently of switch-level port configuration.
DLP (Data Loss Prevention) software monitors data transfers at the endpoint or application layer to detect exfiltration and has no relationship to switch port security mechanisms.
Heuristic firewall analysis inspects network traffic content at Layers 3-7 and is unrelated to the MAC address-based access control that port security provides at Layer 2.
Concept tested: Switch port security MAC address-based access control
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_55_se/configuration/guide/scg_2960/swtrafc.html
Topics
Community Discussion
No community discussion yet for this question.