Cisco Certified Support Technician (CCST) CybersecurityNetwork SecurityMedium
A network technician is configuring a new switch and needs to implement a security feature that prevents unauthorized devices from connecting to specific switch ports. This feature should allow only pre-approved MAC addresses to communicate through those ports. Which switch security feature should the technician configure?
- ALink Aggregation Control Protocol (LACP)
- BSpanning Tree Protocol (STP)
- CVLAN Tagging
- DPort Security
Show answer & explanationAnswer & explanation
Correct answer: D. Port Security
Port security is a switch feature that allows an administrator to restrict input to an interface by limiting and identifying MAC addresses of nodes that are allowed to access the port. It can be configured to allow only specific, pre-approved MAC addresses.
Why the other options are wrong
- A. LACP bundles multiple physical links into a single logical link for increased bandwidth and redundancy, not for MAC-based port access control.
- B. STP prevents network loops but has no role in restricting device access based on MAC addresses.
- C. VLAN tagging segments broadcast domains but does not restrict devices based on MAC addresses at the port level.
Port Security
A switch feature that restricts input to a port by limiting and identifying MAC addresses of allowed devices.
- Prevents unauthorized devices from connecting to switch ports.
- Can be configured to learn MAC addresses dynamically or statically.
- Action for violation can be shutdown, restrict, or protect.
Memory trick: Port Security Prevents Pesky Peers.