Cisco CCNA Exam 200-125: Default MAC Addresses Permitted on a Switch Port with Port Security Enabled

Default MAC Addresses Permitted on a Switch Port with Port Security Enabled

Prev Question Next Question

Question

By default, how many MAC addresses are permitted to be learned on a switch port with port security enabled?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C

Port security is a feature on Cisco switches that allows an administrator to restrict the number of MAC addresses that can be learned on a switch port. This is done to prevent unauthorized devices from connecting to the network, as well as to limit the impact of a potential security breach.

By default, when port security is enabled on a switch port, only one MAC address is allowed to be learned. This means that if a switch port receives traffic from more than one MAC address, the port will be placed into a security violation state and will stop forwarding traffic.

The default behavior of port security can be changed by configuring the maximum number of MAC addresses allowed on a port. This can be done using the following command:

c
switch(config-if)# switchport port-security maximum <number>

where <number> is the maximum number of MAC addresses allowed on the port.

The options given in the question are:

A. 8 B. 2 C. 1 D. 0

The correct answer to this question is C. By default, only one MAC address is allowed to be learned on a switch port with port security enabled. Options A and B are incorrect because they represent higher limits than the default. Option D is incorrect because port security must be enabled for MAC addresses to be learned on a port.