nerdexam
Cisco

300-420 · Question #326

Refer to the exhibit. A Cisco Catalyst switch is configured to allow only one MAC address to be learned manually on interface gig0/2. Which command must be run to dynamically learn the devices that…

The correct answer is A. switchport port-security mac-address sticky. To dynamically learn additional devices on a Cisco Catalyst switch port configured for port security, the engineer must use the 'switchport port-security mac-address sticky' command.

Advanced Enterprise Campus Networks

Question

Refer to the exhibit. A Cisco Catalyst switch is configured to allow only one MAC address to be learned manually on interface gig0/2. Which command must be run to dynamically learn the devices that are connected to the switch port?

Exhibit

300-420 question #326 exhibit

Options

  • Aswitchport port-security mac-address sticky
  • Bswitchport port-security mac-address auto
  • Cswitchport port-security aging
  • Dswitchport port-security maximum 1 auto

How the community answered

(40 responses)
  • A
    88% (35)
  • B
    8% (3)
  • C
    3% (1)
  • D
    3% (1)

Why each option

To dynamically learn additional devices on a Cisco Catalyst switch port configured for port security, the engineer must use the 'switchport port-security mac-address sticky' command.

Aswitchport port-security mac-address stickyCorrect

The `switchport port-security mac-address sticky` command enables an interface to dynamically learn MAC addresses that connect to it. Once learned, these MAC addresses are saved into the running configuration as sticky secure MACs, allowing them to be retained even after a switch reboot if the configuration is saved.

Bswitchport port-security mac-address auto

The command `switchport port-security mac-address auto` is not a valid command for enabling dynamic MAC address learning in Cisco IOS port security.

Cswitchport port-security aging

The `switchport port-security aging` command configures the aging time or type for secure MAC addresses, but it does not enable the dynamic learning function itself.

Dswitchport port-security maximum 1 auto

The `switchport port-security maximum 1` command sets the maximum number of secure MAC addresses to one, but the `auto` keyword is not valid in this context for enabling dynamic learning.

Concept tested: Cisco port security- sticky MAC addresses

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_50_se/configuration/guide/scg/swportsec.html

Topics

#Port Security#MAC Address Learning#Switch Security#Sticky MAC

Community Discussion

No community discussion yet for this question.

Full 300-420 Practice