A network administrator is configuring port security on a Cisco switch. The company security policy specifies that when a violation occurs, packets with unknown source addresses should be dropped and no notification should be sent. Which violation mode should be configured on the interfaces?

  • off
  • restrict
  • protect
  • shutdown
Answers Explanation & Hints:

On a Cisco switch, an interface can be configured for one of three violation modes, specifying the action to be taken if a violation occurs:
Protect – Packets with unknown source addresses are dropped until a sufficient number of secure MAC addresses are removed, or the number of maximum allowable addresses is increased. There is no notification that a security violation has occurred.
Restrict – Packets with unknown source addresses are dropped until a sufficient number of secure MAC addresses are removed, or the number of maximum allowable addresses is increased. In this mode, there is a notification that a security violation has occurred.
Shutdown – The interface immediately becomes error-disabled and the port LED is turned off.

For more Questions and Answers:

CCNA 2 v7 – SRWE v7.02 – Modules 10 – 13 – L2 Security and WLANs Exam Answers Full 100%