Exam 200-301 All Questions

View all questions & answers for the 200-301 exam

Exam 200-301 topic 1 question 981 discussion

Actual exam question from Cisco's 200-301

Question #: 981
Topic #: 1

Refer to the exhibit. A network engineer started to configure port security on a new switch. These requirements must be met:

• MAC addresses must be learned dynamically.
• Log messages must be generated without disabling the interface when unwanted traffic is seen.

Which two commands must be configured to complete this task? (Choose two.)

A. SW(config-if)#switchport port-security violation restrict
B. SW(config-if)#switchport port-security mac-address 0010.7B84.45E6
C. SW(config-if)#switchport port-security maximum 2
D. SW(config-if)#switchport port-security violation shutdown
E. SW(config-if)#switchport port-security mac-address sticky

Show Suggested Answer

Suggested Answer: AE 🗳️

by j1mlawton at Feb. 15, 2023, 2:14 p.m.

Comments

Submit Cancel

Yaqub009

Highly Voted 2 years, 4 months ago

Selected Answer: AE

1.MAC addresses must be learned dynamically : E. SW(config-if)#switchport port-security mac-address sticky because, --sticky command automatically learns the MAC address of the computer connected to SW. 2.Log messages must be generated without disabling the interface when unwanted traffic is seen: --A. SW(config-if)#switchport port-security violation restrict. So, correct answers are A and E. B is incorrect, because this MAC is not dynamically learned C is incorrect, because they don`t say that there can have max 2 MAC addresses D is incorrect, because Shutdown mode is disable the interface.

upvoted 48 times

rogi2023

2 years, 2 months ago

This is correct inclusive detailed explanation :-) AE

upvoted 9 times

...

JulesAZ

1 year, 4 months ago

Brilliant, Thanks

upvoted 1 times

...

lucantonelli93

Highly Voted 2 years, 4 months ago

Selected Answer: AE

The correct answers it's AE

upvoted 6 times

...

Fos10

Most Recent 8 months, 3 weeks ago

Selected Answer: AE

The two commands that meet the requirements are: SW(config-if)#switchport port-security violation restrict (to log messages without disabling the interface). SW(config-if)#switchport port-security mac-address sticky (to dynamically learn MAC addresses). Final Answer: A. SW(config-if)#switchport port-security violation restrict E. SW(config-if)#switchport port-security mac-address sticky

upvoted 1 times

...

[Removed]

1 year, 2 months ago

Selected Answer: AE

A & E are correct

upvoted 1 times

...

a67c04a

1 year, 4 months ago

Selected Answer: AC

AC - they asked for MAC addresses, so I go with C

upvoted 1 times

Rich_rude

1 year, 1 month ago

bUT THEY DIDNT ASK TO RESTRICT IT DOWN TO 2

upvoted 1 times

...

[Removed]

1 year, 6 months ago

Selected Answer: AC

It could easily be AE. However, dynamic learning doesn't require the sticky command; it functions by default. Sticky simply means that the addresses stay in the running configuration and don't age out like other addresses do. The question asks about "mac addresses", but by default only *one* address - singular - is simultaneously permitted on an access port. The topology shows a laptop instead of a desktop PC, which is interesting too. Do we take this to imply that the clients utilizing this switchport are likely to change frequently? This would necessitate multiple MAC addresses to prevent downtime when clients connect and disconnect, and "sticky" would not be appropriate here either. Hmmmm....

upvoted 2 times

[Removed]

1 year, 6 months ago

I just realized, aging is disabled by default. But sticky is still unnecessary for dynamic learning; it's only if you want to dynamically *configure*. Without aging, 2 MAC addresses won't help much on a switchport. I guess AE is the best option. Weird question.

upvoted 2 times

...

bugmenot240410

1 year, 2 months ago

without sticky also meet the requirement. I guess this question ask grammer than commands

upvoted 1 times

...

Scarfa

1 year, 7 months ago

Selected Answer: AC

Answers are A and C. It's not E since the question asks for multiple MAC addresses. If you just use the command "switchport port-security mac-address sticky" the switch just learn 1 MAC. But the question explicitly ask for addressES.

upvoted 1 times

...