Examkin

Question

Difficulty: EasyLayer 2 Security Features (Port Security, DHCP Snooping, DAI)

A network administrator wants to restrict access on a switch port to an authorized end device. If an unauthorized MAC address sends traffic to the port, the interface must drop the frames, avoid incrementing the security violation counter, and avoid disabling the port. Which port security violation mode meets this requirement?

  1. protectAnswer
  2. B
    restrict
  3. C
    shutdown
  4. D
    disabled

Answer

The protect violation mode silently drops packets from unknown MAC addresses without incrementing the security violation counter or placing the interface into an err-disabled state.
The protect violation mode silently drops packets with unauthorized source MAC addresses. It does not increment the interface's security violation counter, nor does it send SNMP traps or Syslog notifications.

Step-by-Step Solution

1
Analyze the operational requirements
The requirement specifies dropping unauthorized frames silently without raising violation counters or bringing down the link.
Port security violation modes differ in how they react to unauthorized MAC addresses.
2
Evaluate Port Security violation mode options
Protect mode drops frames silently without counter increments. Restrict mode drops frames but logs violations and increments counters. Shutdown mode err-disables the interface.
Matching the behavior to the protect keyword fulfills all prompt criteria.

Key Concept

Port Security Violation Modes (Protect, Restrict, Shutdown)
Rate this question

Topics

Layer 2 Security Features (Port Security, DHCP Snooping, DAI)

More questions from this topic