Why would a network administrator configure port security on a switch?
A.
to prevent unauthorized Telnet access to a switch port
B.
to prevent unauthorized hosts from accessing the LAN
C.
to limit the number of Layer 2 broadcasts on a particular switch port
D.
block unauthorized access to the switch management interfaces
Explanation:
If the network engineer knows what devices should be cabled and connected to particular interfaces on a switch, the engineer can use port security to restrict that interface so that only the expected devices can use it. Port security identifies devices based on the source MAC address of Ethernet frames the devices send.
The Port Security feature is used to restrict traffic on a switch interface (also called a “switchport” or “port”) by identifying and limiting traffic allowed to enter that port based on source Ethernet MAC addresses.
the Port Security feature remembers the Ethernet MAC address connected to the switch port and allows only that MAC address to communicate on that port. If any other MAC address tries to communicate through the port, port security will disable the port. Most of the time, network administrators configure the switch to send a SNMP trap to their network monitoring solution that the port’s disabled for security reasons.
Of course, implementing any security solution always involves a trade-off — most often, you trade increased security for less convenience. When using port security, you can prevent devices from accessing the network, which increases security.
LAN switch (VLAN)