nerdexam
Cisco

300-370 · Question #42

An engineer is concerned about rogue-on-wire and wants to enable port security. Which guideline must the engineer follow?

The correct answer is B. Use 802 1x with port security to prevent MAC spoofing. Using 802.1x with port security prevents unauthorized AP from connecting even if they spoof the MAC address of an authorized AP.

Troubleshooting Wireless Security

Question

An engineer is concerned about rogue-on-wire and wants to enable port security. Which guideline must the engineer follow?

Options

  • AConfigure Switched Port Analyzer destination ports as secure.
  • BUse 802 1x with port security to prevent MAC spoofing.
  • CEnable port security on dynamic access ports.
  • DEmploy static MAC address configuration for APs with port security.

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    92% (24)
  • C
    4% (1)

Explanation

Using 802.1x with port security prevents unauthorized AP from connecting even if they spoof the MAC address of an authorized AP.

Topics

#Port security#Rogue AP prevention#802.1X#MAC spoofing

Community Discussion

No community discussion yet for this question.

Full 300-370 Practice