200-301 Question 445
Single answerA network administrator is tasked with securing a switch port connected to a critical server to prevent unauthorized devices from connecting. The administrator configures port security but later notices that the server's MAC address is being dynamically learned instead of being statically assigned. Which port security violation mode should the administrator configure to immediately disable the port if an unauthorized device is connected?
- A
Protect
- B
Restrict
- C
Shutdown
- D
Monitor
Show answer and explanation
Correct answer: C
Explanation
To prevent unauthorized devices from connecting to the switch port and to ensure maximum security for the server, the 'shutdown' violation mode is the appropriate choice. When a violation occurs, the port is immediately disabled, ensuring no further unauthorized access. Other modes like 'protect' and 'restrict' do not disable the port, which may not meet the administrator's security requirements.
- A. Incorrect.
Protect mode drops packets with unknown MAC addresses but does not log violations or disable the port. It is not suitable if the port needs to be disabled upon a violation.
- B. Incorrect.
Restrict mode drops packets with unknown MAC addresses and logs the violations. However, it does not disable the port entirely.
- C. Correct.
Shutdown mode immediately disables the port when a violation occurs, making it the most secure option to prevent unauthorized access.
- D. Incorrect.
Monitor mode is not a valid port security violation mode and does not apply to this scenario.