350-701 · Question #609
An engineer must set up 200 new laptops on a network and wants to prevent the users from moving their laptops around to simplify administration. Which switch port MAC address security setting must…
The correct answer is C. sticky. To restrict laptops to specific switch ports and prevent users from moving them, configure port security with the sticky MAC address setting, which dynamically learns MAC addresses and then converts them to static secure MAC addresses.
Question
An engineer must set up 200 new laptops on a network and wants to prevent the users from moving their laptops around to simplify administration. Which switch port MAC address security setting must be used?
Options
- Aaging
- Bstatic
- Csticky
- Dmaximum
How the community answered
(52 responses)- B2% (1)
- C94% (49)
- D4% (2)
Why each option
To restrict laptops to specific switch ports and prevent users from moving them, configure port security with the `sticky` MAC address setting, which dynamically learns MAC addresses and then converts them to static secure MAC addresses.
`aging` is a setting for port security that defines how long a secure MAC address remains valid before it's removed; it doesn't prevent movement, but controls the lifespan of learned addresses.
`static` secure MAC addresses are manually configured for a port, which would be administratively burdensome for 200 new laptops and doesn't simplify administration.
The `sticky` MAC address security setting on a switch port learns the MAC address of the first device connected to that port and then automatically adds it to the running configuration as a static secure MAC address. If a different MAC address attempts to connect, the port goes into an error-disabled state, effectively preventing unauthorized device movement.
`maximum` is a setting that defines the maximum number of secure MAC addresses allowed on a port; it doesn't prevent movement, but rather limits the number of devices.
Concept tested: Port Security MAC sticky setting
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_55_se/configuration/guide/3560_scg/swportsec.html
Topics
Community Discussion
No community discussion yet for this question.