nerdexam
HP

HP0-Y43 · Question #51

If you use the MAC lockout feature to block a specific MAC address on an HP 3500zl switch, which traffic is dropped?

The correct answer is C. The switch will drop any Layer 2 traffic that contains the specified MAC address as the source address. It blocks both if the MAC address is the source address and if the MAC address is the destination MAC Lockout involves configuring a MAC address on all ports and VLANs for a switch so that any traffic to or from the "locked-out" MAC address will be dropped. This means that all…

Implement Network Services and Security

Question

If you use the MAC lockout feature to block a specific MAC address on an HP 3500zl switch, which traffic is dropped?

Options

  • AThe switch will drop traffic from devices directly connected to the specific port on which MAC lockout is
  • BThe switch will drop frames only if the source address is the specified MAC address and port security is
  • CThe switch will drop any Layer 2 traffic that contains the specified MAC address as the source address.
  • DThe switch will drop routed or switched traffic if the destination is the specified MAC address.

How the community answered

(29 responses)
  • A
    14% (4)
  • B
    7% (2)
  • C
    76% (22)
  • D
    3% (1)

Explanation

It blocks both if the MAC address is the source address and if the MAC address is the destination MAC Lockout involves configuring a MAC address on all ports and VLANs for a switch so that any traffic to or from the "locked-out" MAC address will be dropped. This means that all data packets addressed to or from the given address are stopped by the switch. MAC Lockout is implemented on a per switch assignment. You can think of MAC Lockout as a simple blacklist. The MAC address is locked out on the switch and on all VLANs. No data goes out or in from the blacklisted MAC address to a switch using MAC Lockout. To fully lock out a MAC address from the network it would be necessary to use the MAC Lockout command on all switches. To use MAC Lockout you must first know the MAC Address you wish to block.

Topics

#MAC lockout#Layer 2 security#frame filtering#port security

Community Discussion

No community discussion yet for this question.

Full HP0-Y43 Practice