GSLC · Question #577
An administrator needs to connect a router in one building to a router in another using Ethernet. Each router is connected to a managed switch and the switches are connected to each other via a…
The correct answer is D. Implement port security on the switches. Port security on managed switches restricts which MAC addresses are allowed per port, directly preventing unauthorized devices from connecting to the network.
Question
An administrator needs to connect a router in one building to a router in another using Ethernet. Each router is connected to a managed switch and the switches are connected to each other via a fiber line. Which of the following should be configured to prevent unauthorized devices from connecting to the network?
Options
- AConfigure each port on the switches to use the same VLAN other than the default one
- BEnable VTP on both switches and set to the same domain
- CConfigure only one of the routers to run DHCP services
- DImplement port security on the switches
How the community answered
(41 responses)- A2% (1)
- B2% (1)
- C7% (3)
- D88% (36)
Why each option
Port security on managed switches restricts which MAC addresses are allowed per port, directly preventing unauthorized devices from connecting to the network.
Assigning all ports to a non-default VLAN segments traffic but does not prevent an unauthorized device from physically connecting to and communicating within that VLAN.
VTP synchronizes VLAN configuration across switches to reduce administrative overhead but has no mechanism to authenticate or restrict which devices can plug into switch ports.
Running DHCP on only one router limits IP address issuance but an unauthorized device can still gain access by assigning itself a static IP address.
Port security is a switch feature that limits valid MAC addresses on a per-port basis and triggers a configurable violation action (restrict, protect, or shutdown) when an unknown device connects. It is the only option listed that actively authenticates and restricts physical device connections at the switch level, addressing the scenario directly.
Concept tested: Switch port security to restrict unauthorized devices
Source: https://www.cisco.com/c/en/us/support/docs/lan-switching/port-security/82081-port-security.html
Topics
Community Discussion
No community discussion yet for this question.