SK0-004 · Question #415
Which of the following access control methods allows or blocks devices based on MAC addresses?
The correct answer is A. Port security. Port security is a Layer 2 switch feature that controls network access by allowing or blocking traffic based on device MAC addresses.
Question
Which of the following access control methods allows or blocks devices based on MAC addresses?
Options
- APort security
- BACL
- CHost IDS
- DNetwork IDS
How the community answered
(34 responses)- A94% (32)
- B3% (1)
- C3% (1)
Why each option
Port security is a Layer 2 switch feature that controls network access by allowing or blocking traffic based on device MAC addresses.
Port security is configured directly on switch ports and restricts which devices can connect by enforcing allowed MAC addresses. When an unauthorized MAC address is detected, the port can be shut down, restrict traffic, or send a violation alert. This makes it the direct mechanism for MAC-based access control.
ACLs filter traffic based on IP addresses, protocols, or port numbers - not MAC addresses - and operate at Layer 3/4.
A Host IDS monitors activity on a single endpoint for signs of intrusion and does not enforce access control based on MAC addresses.
A Network IDS passively monitors network traffic for suspicious patterns and does not block or allow devices based on MAC addresses.
Concept tested: Port security MAC address-based access control
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/port_sec.html
Topics
Community Discussion
No community discussion yet for this question.