Refer to the exhibit. A junior network administrator was given the task of configuring port security
on SwitchA to allow only PC_A to access the switched network through port fa0/1. If any other
device is detected, the port is to drop frames from this device. The administrator configured the
interface and tested it with successful pings from PC_A to RouterA, and then observes the output
from these two show commands.
Which two of these changes are necessary for SwitchA to meet the requirements? (Choose two.)
A.
Configure port security to shut down the interface in the event of a violation.
B.
Port security needs to be enabled on the interface.
C.
Enable port security globally.
D.
Port security needs to be configured to allow only one learned MAC address.
E.
Port security interface counters need to be cleared before using the show command.
F.
The port security configuration needs to be saved to NVRAM before it can become active.
Explanation:
This question is to examine the layer 2 port security.
According to the exhibit, we know that the port security is configured to restrict the interface in the
event of a violation. So A is wrong.
The port security should be enabled on the interface, not globally.
So the correct answers are B and D.