Home » Cisco » 100-105 » Which option is the default switch port port-security violation mode?
Which option is the default switch port port-security violation mode?
A. shutdown
B. protect
C. shutdown vlan
D. restrict
Correct Answer: A
Explanation/Reference:
Explanation:
Shutdown–This mode is the default violation mode; when in this mode, the switch will automatically force the switchport into an error disabled (errdisable) state when a violation occurs. While in this state, the switchport forwards no traffic. The switchport can be brought out of this error disabled state by issuing the errdisable recovery cause CLI command or by disabling and reenabling the switchport.
Shutdown VLAN–This mode mimics the behavior of the shutdown mode but limits the error disabled state the specific violating VLAN.
A – The default configuration of a Cisco switch has port security disabled. If you enable switch port security, the default behavior is to allow only 1 MAC address, shutdown the port in case of security violation and sticky address learning is disabled.
Shutdown—This mode is the default violation mode; when in this mode, the switch will automatically force the switchport into an error disabled (err-disable) state when a violation occurs. While in this state, the switchport forwards no traffic. The switchport can be brought out of this error disabled state by issuing the errdisable recovery cause CLI command or by disabling and reenabling the switchport.
http://www.ciscopress.com/articles/article.asp?p=1722561
Answers is D