Exam 300-115 topic 5 question 342 discussion

Actual exam question from Cisco's 300-115

Question #: 342
Topic #: 5

[All 300-115 Questions]

On which interface can port security be configured?

A. static trunk ports
B. destination port for SPAN
C. EtherChannel port group
D. dynamic access point

Show Suggested Answer

Suggested Answer: Explanation 🗳️
Port Security and Port Types -
You can configure port security only on Layer 2 interfaces. Details about port security and different types of interfaces or ports are as follows:
Access ports--You can configure port security on interfaces that you have configured as Layer 2 access ports. On an access port, port security applies only to

the access VLAN. Trunk ports--You can configure port security on interfaces that you have configured as Layer 2 trunk ports. VLAN maximums are not useful for access ports. The device allows VLAN maximums only for VLANs associated with the trunk port.
SPAN ports--You can configure port security on SPAN source ports but not on SPAN destination ports.

Ethernet Port Channels--Port security is not supported on Ethernet port channels. Reference: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/

sw/4_1/nx- os/security/configuration/guide/sec_nx-os-cfg/sec_portsec.html

by Aibrahim at Aug. 20, 2019, 10:35 a.m.

Comments

Submit Cancel

0nsp33d

5 years, 5 months ago

Answer is D - https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/25ew/configuration/guide/conf/port_sec.html ort Security Guidelines and Restrictions Follow these guidelines when configuring port security: •A secure port cannot be a trunk port. •A secure port cannot be a destination port for Switch Port Analyzer (SPAN). •A secure port cannot belong to an EtherChannel port-channel interface. •A secure port and static MAC address configuration are mutually exclusive.

upvoted 1 times

...

Aibrahim

5 years, 10 months ago

Answer is A

upvoted 2 times

...