Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)Network SecurityMedium
A network technician is configuring a new switch in a data center. To enhance security and prevent unauthorized devices from connecting to the network, the technician enables a feature that restricts which MAC addresses can send traffic on specific switch ports. If an unknown MAC address attempts to connect, the port will be shut down or restricted. What security feature is the technician implementing?
- ASpanning Tree Protocol (STP)
- BPort Mirroring
- CPort Security
- DVLAN Trunking
Show answer & explanationAnswer & explanation
Correct answer: C. Port Security
Port Security on a switch allows administrators to restrict input to a port by limiting and/or identifying MAC addresses allowed on that port, preventing unauthorized devices from gaining network access.
Why the other options are wrong
- A. STP prevents network loops but does not control which devices can connect to a port.
- B. Port Mirroring (SPAN) copies traffic from one port to another for monitoring, not for access control.
- D. VLAN Trunking allows multiple VLANs to traverse a single link, not for restricting MAC addresses.
Port Security
A switch feature that restricts input to an interface by limiting and/or identifying MAC addresses allowed on that port.
- Prevents unauthorized devices from connecting to the network.
- Can be configured to shut down, restrict, or protect a port.
- Operates at Layer 2 (Data Link Layer).
Memory trick: Port Security: Secure the door against unknown MACs.