nerdexam
Cisco

300-370 · Question #171

An engineer is concerned about rogue-on-wire and wants to enable port security. Which guideline must the engineer follow?

The correct answer is D. Use 802.1x with port security to prevent MAC spoofing. Using 802.1x with port security prevents unauthorized AP from connecting even if they spoof the MAC address of an authorized AP.

Troubleshooting Wireless Security

Question

An engineer is concerned about rogue-on-wire and wants to enable port security. Which guideline must the engineer follow?

Options

  • AConfigure ACLs on the switch.
  • BConfigure static mac addresses on the switch ports that the APs are connected.
  • CEnable port security on dynamic access ports.
  • DUse 802.1x with port security to prevent MAC spoofing.

How the community answered

(33 responses)
  • A
    12% (4)
  • B
    9% (3)
  • C
    3% (1)
  • D
    76% (25)

Explanation

Using 802.1x with port security prevents unauthorized AP from connecting even if they spoof the MAC address of an authorized AP.

Topics

#Rogue-on-wire#Port security#802.1X#MAC spoofing

Community Discussion

No community discussion yet for this question.

Full 300-370 Practice