200-301 Question 443
Single answerA network administrator wants to secure a switch port by allowing only one specific MAC address to connect to it. If a device with a different MAC address is detected, the port should automatically shut down. Which configuration should the administrator apply to achieve this?
- A
Enable port security, set the maximum allowed MAC addresses to 2, and configure the violation action to 'restrict'.
- B
Enable port security, manually configure the allowed MAC address, and set the violation action to 'shutdown'.
- C
Enable port security, enable sticky MAC address learning, and configure the violation action to 'protect'.
- D
Enable port security, configure dynamic MAC address learning, and set the violation action to 'shutdown'.
Show answer and explanation
Correct answer: B
Explanation
The correct configuration involves enabling port security, manually specifying the allowed MAC address, and setting the violation action to 'shutdown'. This ensures that only the defined MAC address can use the port, and any attempt by a device with a different MAC address will cause the port to shut down.
- A. Incorrect.
This option sets the maximum allowed MAC addresses to 2, which would not restrict the port to a single MAC address. Additionally, the 'restrict' action only logs the violation but does not shut down the port.
- B. Correct.
This option correctly configures port security to allow only a specific MAC address and ensures that the port shuts down if a violation occurs, meeting the requirements of the scenario.
- C. Incorrect.
While sticky MAC address learning dynamically saves MAC addresses, it does not allow for manually restricting a single MAC address. Additionally, the violation action 'protect' prevents unauthorized traffic but does not shut down the port.
- D. Incorrect.
Dynamic MAC address learning is not compatible with the requirement to manually specify a single MAC address. Additionally, while the 'shutdown' action is correct, this option does not meet the manual MAC address configuration requirement.