350-401 Question #707: Real Exam Question with Answer & Explanation

Question

Which command address learning on the configures port security on a switch to enable permanent MAC interface?

Options

• Aswitchport port-security mac-address-learning enable
• Bswitchport port-security mac-address timer 0
• Cswitchport port-security mac-address sticky
• Dswitchport port-security mac-address maximum 1 sticky
• Eswitchport port-security mac-address permanent

Explanation

The switchport port-security mac-address sticky command enables port security to dynamically learn MAC addresses and then convert them into static entries in the running configuration.

Common mistakes.

• A. There is no standard switchport port-security mac-address-learning enable command for this functionality; learning behavior is controlled by sticky or dynamic modes.
• B. switchport port-security mac-address timer 0 configures the aging time for dynamically learned secure MAC addresses to never age, but it doesn't enable the sticky learning mechanism itself.
• D. switchport port-security mac-address maximum 1 sticky enables sticky learning and sets a maximum, but the core command for enabling the sticky learning functionality is switchport port-security mac-address sticky.
• E. There is no switchport port-security mac-address permanent command; static MAC addresses are manually configured, and sticky MACs provide the 'permanent learned' behavior.

Concept tested. Port security sticky MAC addresses

Reference. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_55_se/configuration/guide/scg/swports.html#wp1124652

No community discussion yet for this question.