What is the Cisco preferred countermeasure to mitigate CAM overflows?
A.
Port security
B.
Root guard
C.
IP source guard
D.
Dynamic port security
Explanation:
Brad
Answer- D
Confidence level: 75%
Note: According to multiple links, port security is used to mitigate CAM overflow attacks. However, I found the
following statement on a Cisco page: “A more administratively scalable solution is the implementation of
dynamic port security at the switch”. Because of this, I believe the verbiage “Cisco preferred” would point to
answer D.
Brad’s source link (maybe): http://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750-seriesswitches/72846-layer2-secftrs-catl3fixed.html
BD
User @Answer on securitytut.com considers A. as the correct answer.