Topic 5: Switch Security

Which of the following is a common method for preventing unauthorized access to a switch port?

• Port Security

• Routing

• VLAN Trunking

• Dynamic Host Configuration Protocol (DHCP)

What is the main purpose of Port Security on a switch?

• To prevent unauthorized devices from accessing the network

• To provide quality of service (QoS)

• To monitor bandwidth usage

• To enable VLAN tagging

What happens when a violation occurs on a port configured with Port Security?

• The port is shutdown by default

• The switch sends an alert to the administrator

• The device is automatically added to the authorized list

• The port is allowed to continue working

Which of the following is an example of a valid Port Security violation action?

• Restrict

• Block

• Redirect

• Deny

What is the purpose of the sticky option in Port Security?

• To allow the switch to learn the MAC address dynamically and add it to the port security list

• To restrict traffic from unknown sources

• To log the MAC addresses of devices on the port

• To disable port security temporarily

Which of the following is the default behavior for a switch port when Port Security is enabled?

• The port is restricted to a single MAC address

• • The port allows multiple MAC addresses

• • The port is disabled

• • The port forwards all traffic

What command is used to configure Port Security on a Cisco switch?

• switchport port-security

• • port-security enable

• enable port-security

• security port-enable

What action is taken if the protect mode is configured on a port with Port Security?

• The port drops traffic from unauthorized MAC addresses

• The port logs the violation and allows unauthorized devices

• The port shuts down immediately

• The port restricts only the inbound traffic

Which of the following features helps mitigate MAC address flooding attacks?

• Dynamic ARP Inspection

• Port Security

• Spanning Tree Protocol

• VLAN Routing

What type of attack is prevented by enabling Port Security?

• ARP spoofing

• MAC address flooding

• MAC address flooding

• Man-in-the-middle