In a switch's port security configuration, what should be set when the maximum number of MAC addresses is reached?

In a switch's port security configuration, what should be set when the maximum number of MAC addresses is reached?

• A. Shutdown
• B. Protect
• C. Restrict
• D. Enable all

Answer: (C)

When configuring port security on a switch, setting the action to "Restrict" when the maximum number of MAC addresses is reached is a suitable choice because it allows the switch to continue forwarding packets from the known secure MAC addresses while dropping packets from unknown MAC addresses. This means that legitimate devices can still communicate without interruption, while any potential unauthorized access attempts are mitigated effectively. In this mode, the switch generates a security violation message that can be logged, helping network administrators to monitor potential security threats without severely impacting network performance. The device not only restricts unauthorized access but also retains the ability to notify you of these events for further investigation. This approach strikes a balance between security and usability, ensuring that the network remains operational while enforcing security policies.

When configuring port security on a switch, setting the action to "Restrict" when the maximum number of MAC addresses is reached is a suitable choice because it allows the switch to continue forwarding packets from the known secure MAC addresses while dropping packets from unknown MAC addresses. This means that legitimate devices can still communicate without interruption, while any potential unauthorized access attempts are mitigated effectively.

In this mode, the switch generates a security violation message that can be logged, helping network administrators to monitor potential security threats without severely impacting network performance. The device not only restricts unauthorized access but also retains the ability to notify you of these events for further investigation.

This approach strikes a balance between security and usability, ensuring that the network remains operational while enforcing security policies.