Security Questions

Question 1

Which Cisco Catalyst feature automatically disables the port in an operational PortFast upon receipt of a BPDU?

Which feature will disable an operating interface automatically when receiving a BPDU?

A. BackboneFast
B. UplinkFast
C. Root Guard
D. BPDU Guard
E. BPDU Filter

Answer: D

Explanation

We only enable PortFast feature on access ports (ports connected to end stations). But if someone does not know he can accidentally plug that port to another switch and a loop may occur when BPDUs are being transmitted and received on these ports.

With BPDU Guard, when a PortFast receives a BPDU, it will be shut down to prevent a loop -> D is correct.

Question 2

Which two commands correctly verify whether port security has been configured on port FastEthernet 0/5 on a switch? (Choose two)

A. Switch# show switchport port-security interface FastEthernet 0/5
B. Switch# show port-secure interface FastEthernet 0/5
C. Switch# show port-security interface FastEthernet 0/5
D. Switch# show running-config

Answer: C D

Explanation

We can verify whether port security has been configured by using the “show running-config” or “show port-security interface ” for more detail. An example of the output of “show port-security interface ” command is shown below: