350-401 · Question #707
Which command address learning on the configures port security on a switch to enable permanent MAC interface?
The correct answer is C. switchport port-security mac-address sticky. The switchport port-security mac-address sticky command enables port security to dynamically learn MAC addresses and then convert them into static entries in the running configuration.
Question
Which command address learning on the configures port security on a switch to enable permanent MAC interface?
Options
- Aswitchport port-security mac-address-learning enable
- Bswitchport port-security mac-address timer 0
- Cswitchport port-security mac-address sticky
- Dswitchport port-security mac-address maximum 1 sticky
- Eswitchport port-security mac-address permanent
How the community answered
(33 responses)- B3% (1)
- C88% (29)
- D6% (2)
- E3% (1)
Why each option
The `switchport port-security mac-address sticky` command enables port security to dynamically learn MAC addresses and then convert them into static entries in the running configuration.
There is no standard `switchport port-security mac-address-learning enable` command for this functionality; learning behavior is controlled by `sticky` or `dynamic` modes.
`switchport port-security mac-address timer 0` configures the aging time for dynamically learned secure MAC addresses to never age, but it doesn't enable the sticky learning mechanism itself.
The `switchport port-security mac-address sticky` command enables sticky MAC address learning. This feature allows the switch to dynamically learn MAC addresses from traffic on the port and then convert these learned addresses into static, secure MAC addresses in the running configuration, effectively making them 'permanent' for port security enforcement until explicitly removed or the configuration is cleared.
`switchport port-security mac-address maximum 1 sticky` enables sticky learning and sets a maximum, but the core command for enabling the sticky learning functionality is `switchport port-security mac-address sticky`.
There is no `switchport port-security mac-address permanent` command; static MAC addresses are manually configured, and sticky MACs provide the 'permanent learned' behavior.
Concept tested: Port security sticky MAC addresses
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_55_se/configuration/guide/scg/swports.html#wp1124652
Topics
Community Discussion
No community discussion yet for this question.