Ch9-Configuring Switch Interfaces

Question 1

A Cisco switch feature in which the switch watches Ethernet frames that come into an interface, tracks the source MAC addresses of all such frames, and takes a security action if the number of different MAC addresses is exceeded

Answer 1

port security

Question 2

An IEEE standard mechanism (802.3u) with which two nodes can exchange messages for the purpose of choosing to use the same Ethernet standard on both ends of the link, ensuring the link functions and functions well

Answer 2

auto negotiation

Question 3

Generically, any communication in which two communicating devices can concurrently send and receive data. In Ethernet LANs the allowance for both devices to send and receive at the same time, allowed when both devices disable their CSMA/CD logic

Answer 3

full duplex

Question 4

Generically, any communication in which only one device at a time can send data. In Ethernet LANs, the normal result of the CSMA/CD algorithm that enforces the rule that only one device should send at any point in time

Answer 4

half duplex

Question 5

Command reference: Changes context to interface mode

Answer 5

interface type port-number

Question 6

Command reference: Changes the context to interface mode for a range of consecutively numbered interfaces. The subcommands that follow then apply to all interfaces in the range

Answer 6

interface range type start-port - end-port

Question 7

Command reference: Interface mode. Disables/enables the interface, respectively

Answer 7

shutdown | no shutdown

Question 8

Command reference: Interface mode. Manually sets the speed to the listed speed, or, with the auto setting, automatically negotiates the speed

Answer 8

speed [10 | 100 | 1000 | auto]

Question 9

Command reference: Interface mode. Manually sets the port duplex to half or full, or automatically negotiates the duplex setting

Answer 9

duplex [auto | full | half]

Question 10

Command reference: Interface mode. Lists any informative text the engineer wants to track for the interface (for example, the expected device on the other end of the cable)

Answer 10

description text

Question 11

Command reference: Interface configuration command that tell the switch interface to always be an access port port, or always be a trunk port

Answer 11

swtichport mode [access | trunk]

Question 12

Command reference: Interface configuration command that statically adds a specific MAC address as an allowed MAC address on the interface

Answer 12

switchport port-security mac-address address

Question 13

Command reference: Interface configuration command that tells the switch to learn MAC addresses on the interface and add them to the configuration for the interface as secure MAC addresses

Answer 13

switchport port-security mac-address sticky

Question 14

Command reference: Interface subcommand that sets the maximum number of static secure MAC addresses that can be assigned to a single interface

Answer 14

switchport port-security maximum value

Question 15

Command reference:

Interface subcommand that tells the switch what to do if an inappropriate MAC address tries to access the network through a secure switch port

Answer 15

switchport port-security violation [protect | restrict | shutdown]

Question 16

Command reference: Lists the configuration currently in use

Answer 16

show running-config

Question 17

Command reference: Lists MAC addresses defined or learned ports configured with port security

Answer 17

show mac address-table secure [interface type number]

Question 18

Command reference: Lists static MAC addresses and MAC addresses learned or defined with port security

Answer 18

show mac address-table static [interface type number]

Question 19

Command reference: Lists one output line per interface (or only for the listed interface, if included) noting the description, operating state, and settings for duplex and speed on each interface

Answer 19

show interfaces [interface type number] status

Question 20

Command reference: Lists detailed status and statistical information about all interfaces (or the listed interface only)

Answer 20

show interfaces [interface type number]

Question 21

Command reference: Lists an interface’s port security configuration settings and security operational status

Answer 21

show port-security [interface type number]

Question 22

Command reference: Lists one line per interface that summarized the port security settings for any interface on which it is enabled

Answer 22

show port-security

Question 23

Which command produced the following output?

Answer 23

show port-security interface some-interface

Question 24

What possible actions can port security take when a violation occurs?

Answer 24

1. Discard offending traffic
2. Send log and SNMP messages
3. Increment the violation counter
4. Shut down the port