nerdexam
Cisco

350-001 · Question #87

You are the network administrator of a small Layer 2 network with 50 users. Lately, users have been complaining that the network is very slow. While troubleshooting, you notice that the CAM table of…

The correct answer is D. Configure port security. Enabling Port Security Port security is either autoconfigured or enabled manually by specifying a MAC address. If a MAC address is not specified, the source address from the incoming traffic is autoconfigured and secured, up to the maximum number of MAC addresses allowed. These…

Layer 2 Technologies

Question

You are the network administrator of a small Layer 2 network with 50 users. Lately, users have been complaining that the network is very slow. While troubleshooting, you notice that the CAM table of your switch is full, although it supports up to 12,000 MAC addresses. How can you solve this issue and prevent it from happening in the future?

Exhibit

350-001 question #87 exhibit

Options

  • AUpgrade the switches
  • BConfigure BPDU guard
  • CConfigure VLAN access lists
  • DConfigure port security
  • EConfigure Dynamic ARP inspection

How the community answered

(37 responses)
  • A
    5% (2)
  • B
    3% (1)
  • C
    11% (4)
  • D
    78% (29)
  • E
    3% (1)

Explanation

Enabling Port Security Port security is either autoconfigured or enabled manually by specifying a MAC address. If a MAC address is not specified, the source address from the incoming traffic is autoconfigured and secured, up to the maximum number of MAC addresses allowed. These autoconfigured MAC addresses remain secured for a time, depending upon the aging timer set. The autoconfigured MAC addresses are cleared from the port in case of a link-down event. When you enable port security on a port, any dynamic CAM entries that are associated with the port are cleared. If there are any currently configured static or permanent CAM entrie on that same port, you may not be able to enable the port-security on that port. If this is the case, clear the configured static and permanent earl entries on that port and then enable port-security. To enable port security, perform this task in privileged mode:

Topics

#CAM table flooding#port security#MAC flooding#switch security

Community Discussion

No community discussion yet for this question.

Full 350-001 Practice