200-301 Question 401
Single answerA network administrator wants to ensure that only authorized devices can connect to a specific switch port. Which security feature should be implemented to achieve this?
- A
Port Security
- B
Access Control List (ACL)
- C
VLAN Trunking Protocol (VTP)
- D
Dynamic Host Configuration Protocol (DHCP) Snooping
Show answer and explanation
Correct answer: A
Explanation
To prevent unauthorized devices from connecting to a switch port, Port Security should be configured. This feature allows the administrator to define which MAC addresses are allowed to connect to the port, ensuring that only trusted devices have access. Other features like ACLs, VTP, and DHCP Snooping are useful for different security functions but do not specifically address the scenario presented.
- A. Correct.
Port Security is a feature that restricts the devices that can connect to a switch port by limiting access based on MAC addresses. This is the correct option for controlling authorized connections.
- B. Incorrect.
Access Control Lists (ACLs) are used to filter traffic based on Layer 3 (IP) and Layer 4 (TCP/UDP) criteria, but they do not restrict devices connecting to a switch port.
- C. Incorrect.
VLAN Trunking Protocol (VTP) is used for propagating VLAN configurations across switches, but it does not handle device authorization on switch ports.
- D. Incorrect.
Dynamic Host Configuration Protocol (DHCP) Snooping is used to prevent rogue DHCP servers, but it does not restrict devices connecting to a specific switch port.