MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Port security primarily operates at which OSI layer?
   a. Network layer
   b. Data link layer
   c. Transport layer
   d. Application layer
   Answer: b. Data link layerpynetlabs​
2. What is the main function of port security?
   a. Filters IP packets
   b. Restricts unauthorized devices based on MAC address
   c. Encrypts network traffic
   d. Authenticates users with passwords
   Answer: b. Restricts unauthorized devices based on MAC addresspynetlabs​
3. How many MAC addresses are permitted by default on a port with port security enabled?
   a. 0
   b. 1
   c. 2
   d. 10
   Answer: b. 1itexamanswers​
4. Which command enables port security on a Cisco switch interface?
   a. switchport secure enable
   b. interface port-security
   c. switchport port-security
   d. enable secure-mode
   Answer: c. switchport port-securityitexamanswers​
5. Which of the following is not a type of port security violation mode?
   a. Shutdown
   b. Restrict
   c. Protect
   d. Allow
   Answer: d. Allowpynetlabs​
6. The “sticky” keyword in port security helps to:
   a. Permanently disable the port
   b. Dynamically learn and save MAC addresses
   c. Encrypt MAC address data
   d. Filter IP packets
   Answer: b. Dynamically learn and save MAC addressesitexamanswers​
7. A shutdown violation mode will cause what effect?
   a. The interface ignores packets
   b. The port goes into an err-disabled state
   c. The switch reboots
   d. The interface starts forwarding all frames
   Answer: b. The port goes into an err-disabled statepynetlabs​
8. When configuring sticky MAC, the address is saved in which configuration file?
   a. VLAN database
   b. Running-configuration
   c. Startup-configuration
   d. ROMMON
   Answer: b. Running-configurationitexamanswers​
9. Which command verifies active port security configurations?
   a. show mac address-table
   b. show interface security
   c. show port-security interface
   d. show protocols
   Answer: c. show port-security interfaceitexamanswers​
10. In port security, static mode means:
    a. The switch dynamically learns MACs
    b. Admin manually assigns allowed MAC addresses
    c. Port auto-enables after shutdown
    d. Dynamic VLAN mapping
    Answer: b. Admin manually assigns allowed MAC addressespynetlabs​
11. Port security helps prevent which attack type?
    a. MAC flooding
    b. SQL injection
    c. SYN flood
    d. DNS spoofing
    Answer: a. MAC floodingpynetlabs​
12. In protect violation mode, what happens when an unauthorized device connects?
    a. The port is shut down
    b. Violating traffic is dropped silently
    c. The port reboots
    d. The switch logs an alert
    Answer: b. Violating traffic is dropped silentlypynetlabs​
13. Which violation mode logs an alert but keeps the port active?
    a. Shutdown
    b. Restrict
    c. Protect
    d. Disable
    Answer: b. Restrictpynetlabs​
14. Which of the following ports can port security be applied to?
    a. Static access ports
    b. SPAN destination ports
    c. EtherChannel ports
    d. Dynamic access ports
    Answer: a. Static access portsitexamanswers​
15. What happens when the MAC address limit is reached?
    a. The port stops learning new MAC addresses
    b. The switch reboots
    c. The MAC table resets
    d. The interface restarts
    Answer: a. The port stops learning new MAC addressespynetlabs​
16. How many violation types does Cisco port security support?
    a. One
    b. Two
    c. Three
    d. Four
    Answer: c. Threepynetlabs​
17. Which command limits the number of allowed MAC addresses?
    a. switchport max-mac
    b. switchport port-security maximum
    c. port-security count
    d. mac-limit
    Answer: b. switchport port-security maximumitexamanswers​
18. What does CAM table overflow lead to?
    a. Switch operates like a hub
    b. Faster switching
    c. VLAN collapse
    d. Routing error
    Answer: a. Switch operates like a hubpynetlabs​
19. Port security is mainly used on which ports?
    a. Trunk ports
    b. Access ports
    c. SPAN ports
    d. Serial ports
    Answer: b. Access portsitexamanswers​
20. Which default action occurs during a security violation?
    a. Shutdown
    b. Protect
    c. Restrict
    d. Reboot
    Answer: a. Shutdownitexamanswers​
21. The MAC address table in a switch stores:
    a. IP addresses
    b. Device names
    c. MAC addresses
    d. Encryption keys
    Answer: c. MAC addressespynetlabs​
22. The CLI command “no shutdown” is used to:
    a. Disable port-security
    b. Bring an interface back up after shutdown violation
    c. Reset Cisco switch
    d. Erase configurations
    Answer: b. Bring an interface back up after shutdown violationpynetlabs​
23. The sticky feature is best described as:
    a. Manual MAC entry method
    b. Persistent dynamic MAC learning
    c. Broadcast filtering tool
    d. VLAN tagging protocol
    Answer: b. Persistent dynamic MAC learningitexamanswers​
24. Which port status indicates a security violation has occurred?
    a. Listening
    b. Forwarding
    c. Err-disabled
    d. Disabled
    Answer: c. Err-disableditexamanswers​
25. Port security improves which aspect of network management?
    a. Routing efficiency
    b. Device tracking and topology visibility
    c. VLAN assignment precision
    d. Cloud synchronization
    Answer: b. Device tracking and topology visibilitypynetlabs​
26. When “restrict” mode is active, the switch does what with violating MACs?
    a. Shuts down the interface
    b. Drops frames and logs violations
    c. Restarts MAC address learning
    d. Broadcasts warnings
    Answer: b. Drops frames and logs violationspynetlabs​
27. Each port-security violation type determines:
    a. Router routing table entries
    b. How the switch reacts to unauthorized MACs
    c. VLAN configurations
    d. The IP access list used
    Answer: b. How the switch reacts to unauthorized MACspynetlabs​
28. What is a potential consequence of not implementing port security?
    a. Unauthorized access and MAC flooding
    b. Reduced DHCP leases
    c. Port mirroring fails
    d. IPv6 misconfiguration
    Answer: a. Unauthorized access and MAC floodingpynetlabs​
29. Which violation mode allows legitimate users but blocks attacker traffic silently?
    a. Protect
    b. Restrict
    c. Shutdown
    d. Disable
    Answer: a. Protectpynetlabs​
30. What occurs if an unapproved MAC tries to access a restricted port?
    a. The port restarts
    b. The frame is dropped
    c. The configuration resets
    d. The VLAN changes
    Answer: b. The frame is droppedpynetlabs​
31. Port security controls access based on:
    a. IPs
    b. MAC addresses
    c. DNS records
    d. Interface speeds
    Answer: b. MAC addressespynetlabs​
32. Protect, restrict, and shutdown are modes for:
    a. VLAN management
    b. Port security violation response
    c. Link aggregation
    d. Routing control
    Answer: b. Port security violation responsepynetlabs​
33. Port security aids in defending against what network issue?
    a. MAC spoofing
    b. ARP poisoning
    c. SSL hijacking
    d. Session fixation
    Answer: a. MAC spoofingpynetlabs​
34. What must be done to enable port security on an interface?
    a. Assign IP address
    b. Enable access mode first
    c. Create VLAN
    d. Activate spanning tree
    Answer: b. Enable access mode firstitexamanswers​
35. Port security on Cisco switches can be configured for:
    a. Wireless ports
    b. Layer 2 interfaces
    c. Layer 3 routing interfaces
    d. Serial links
    Answer: b. Layer 2 interfacespynetlabs​
36. The error-disabled state can be recovered using:
    a. reload interface
    b. errdisable recovery cause
    c. reset mac-table
    d. enable violation proceed
    Answer: b. errdisable recovery causeitexamanswers​
37. The sticky MAC command is written as:
    a. switchport port-security sticky
    b. switchport port-security mac-address sticky
    c. mac secure sticky-enable
    d. set mac lock
    Answer: b. switchport port-security mac-address stickyitexamanswers​
38. What parameter must be specified for every secured interface?
    a. MAC address
    b. VLAN ID
    c. Speed
    d. IP subnet
    Answer: a. MAC addresspynetlabs​
39. The “restrict” violation logs offenses to:
    a. NVRAM
    b. Console/syslog
    c. Cloud sync
    d. Spanning tree database
    Answer: b. Console/syslogpynetlabs​
40. What happens when the reserved MAC list is full?
    a. New devices are denied access
    b. Switch resets MAC table
    c. Frames are broadcasted
    d. Violations are ignored
    Answer: a. New devices are denied accesspynetlabs​
41. Which Cisco command displays secure MAC addresses?
    a. show port-security address
    b. show mac secure
    c. show switch mac
    d. show vlan mac
    Answer: a. show port-security addressitexamanswers​
42. In dynamic secure mode, MAC addresses are:
    a. Hardcoded
    b. Learned and stored dynamically
    c. Saved permanently
    d. Manually deleted
    Answer: b. Learned and stored dynamicallypynetlabs​
43. In static secure mode, how are MACs determined?
    a. Learned via ARP
    b. Manually configured
    c. Learned from DHCP
    d. Captured dynamically
    Answer: b. Manually configuredpynetlabs​
44. The default violation behavior of Cisco port-security is:
    a. Shut port down
    b. Ignore new address
    c. Alert only
    d. Restart interface
    Answer: a. Shut port downitexamanswers​
45. A port with “protect” mode remains:
    a. Down
    b. Up but ignores unauthorized frames
    c. Disabled permanently
    d. In looping state
    Answer: b. Up but ignores unauthorized framespynetlabs​
46. Which violation type is most commonly used?
    a. Protect
    b. Restrict
    c. Shutdown
    d. Log-only
    Answer: b. Restrictpynetlabs​
47. What is required to uniquely identify a network interface in port security?
    a. MAC address
    b. IP address
    c. Interface name
    d. VLAN tag
    Answer: a. MAC addresspynetlabs​
48. A dynamically secured MAC remains in configuration when saved by:
    a. Using sticky MAC
    b. Using default mode
    c. Resetting switch
    d. Disabling interface
    Answer: a. Using sticky MACitexamanswers​
49. What command clears secure MAC addresses from configuration?
    a. clear port-security
    b. clear mac address-table dynamic
    c. reset security mac
    d. erase interface mac
    Answer: b. clear mac address-table dynamicitexamanswers​
50. Port security ultimately ensures:
    a. Only authorized devices connect to network ports
    b. Load balancing on trunk links
    c. VLAN creation
    d. Encryption of Ethernet traffic
    Answer: a. Only authorized devices connect to network portsitexamanswers+1​

1. https://www.pynetlabs.com/port-security-in-computer-network/
2. https://itexamanswers.net/ccna-200-125-exam-port-security-questions-with-answers.html
3. https://www.sanfoundry.com/cyber-security-questions-answers-ports-types-1/
4. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
5. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
6. https://www.vinsys.com/blog/top-30-mcqs-ceh-exam-preparation
7. https://itexamanswers.net/11-6-4-module-quiz-switch-security-configuration-answers.html
8. https://de.scribd.com/document/524434738/mcq-questions-on-cyber-security
9. https://study-ccna.com/port-security/
10. https://ipcisco.com/quiz/switch-port-security-ccnp/
11. https://www.interviewbit.com/cyber-security-mcq/
12. https://itexamanswers.net/network-security-version1-0-final-exam-answers-full.html
13. https://www.sanfoundry.com/computer-networks-questions-answers-cisco-lan-switches/
14. https://byjus.com/gate/cyber-security-mcqs/
15. https://www.certskills.com/q104-ans/
16. https://learningnetwork.cisco.com/s/question/0D53i00000aTypcCAC/portsecurity-ccna-test-question
17. https://www.youtube.com/watch?v=DxoFBxX6bq0
18. https://community.cisco.com/t5/physical-security/port-security-question/td-p/4477534
19. https://ipcisco.com/quiz/switch-port-security-overview/
20. https://testbook.com/objective-questions/mcq-on-network-security–5eea6a0939140f30f369d917