nerdexam
GIAC

GSLC · Question #577

An administrator needs to connect a router in one building to a router in another using Ethernet. Each router is connected to a managed switch and the switches are connected to each other via a…

The correct answer is D. Implement port security on the switches. Port security on managed switches restricts which MAC addresses are allowed per port, directly preventing unauthorized devices from connecting to the network.

Security Architecture & Engineering

Question

An administrator needs to connect a router in one building to a router in another using Ethernet. Each router is connected to a managed switch and the switches are connected to each other via a fiber line. Which of the following should be configured to prevent unauthorized devices from connecting to the network?

Options

  • AConfigure each port on the switches to use the same VLAN other than the default one
  • BEnable VTP on both switches and set to the same domain
  • CConfigure only one of the routers to run DHCP services
  • DImplement port security on the switches

How the community answered

(41 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    7% (3)
  • D
    88% (36)

Why each option

Port security on managed switches restricts which MAC addresses are allowed per port, directly preventing unauthorized devices from connecting to the network.

AConfigure each port on the switches to use the same VLAN other than the default one

Assigning all ports to a non-default VLAN segments traffic but does not prevent an unauthorized device from physically connecting to and communicating within that VLAN.

BEnable VTP on both switches and set to the same domain

VTP synchronizes VLAN configuration across switches to reduce administrative overhead but has no mechanism to authenticate or restrict which devices can plug into switch ports.

CConfigure only one of the routers to run DHCP services

Running DHCP on only one router limits IP address issuance but an unauthorized device can still gain access by assigning itself a static IP address.

DImplement port security on the switchesCorrect

Port security is a switch feature that limits valid MAC addresses on a per-port basis and triggers a configurable violation action (restrict, protect, or shutdown) when an unknown device connects. It is the only option listed that actively authenticates and restricts physical device connections at the switch level, addressing the scenario directly.

Concept tested: Switch port security to restrict unauthorized devices

Source: https://www.cisco.com/c/en/us/support/docs/lan-switching/port-security/82081-port-security.html

Topics

#port security#switch configuration#network access control#unauthorized devices

Community Discussion

No community discussion yet for this question.

Full GSLC Practice