Port Security Quiz

What is the primary reason for disabling unused switch ports?

• Increase switch speed

• Prevent Layer 3 attacks

• Avoid MAC address table overflow

• Secure the network from unauthorized access

Which command enables port security on a switch interface?

• switchport security enable

• port-security activate

• switchport port-security

• enable port security

What happens if more than the allowed number of MAC addresses is detected on a secured port?

• Port is auto-configured with the new MAC

• Port changes VLANs

• Port goes into error-disabled state

• Port security is disabled

Which of the following is NOT a valid port security violation mode?

• Protect

• Monitor

• Restrict

• Shutdown

What is the default number of MAC addresses allowed on a port with port security?

• 0

• 1

• 5

• 8192

Which command allows the switch to learn and retain MAC addresses in the running configuration?

• mac-address sticky enable

• switchport port-security mac-address sticky

• sticky-mac enable

• mac-learn sticky

What are the two types of port security aging?

• Manual and Dynamic

• Time-based and Static

• Absolute and Inactivity

• Static and Automatic

Which method helps prevent VLAN hopping attacks?

• Enabling DHCP snooping

• Setting native VLAN to 1

• Disabling DTP on access ports

• Using static IP addresses

What is required for Dynamic ARP Inspection (DAI) to function correctly?

• PortFast

• VLAN hopping

• DHCP Snooping

• MAC filtering

What does BPDU Guard do when a BPDU is received on an access port?

• Logs the event

• Sends a syslog message

• Shuts down the port (error-disabled)

• Ignores the BPDU