Switch Security

Question 1

What is Port Security?

Answer 1

Feature that is used to restrict input to an interface by limiting MAC addresses of workstations that are allowed to access a specific port. By default, port security is not defined on switches and requires configuration.

Question 2

What is MAC Spoofing?

Answer 2

Is when attackers change their own physical PC address to conceal their
true identity and pose as someone else.

Question 3

What is CAM Table Overflow?

Answer 3

Is an attack that targets a switch’s MAC table. When the list of addresses exceeds the
maximum size of the table, the switch will initiate its fallback mode and begin to act as
a hub, meaning every frame will be forwarded to every host on the network

Question 4

What are the 3 Violation Modes?

Answer 4

Shutdown, Restrict and Protect

Question 5

Which is the default Violation Mode?

Answer 5

Shutdown mode port must be reset manually

Question 6

What is the major difference between Restrict and Protect modes?

Answer 6

Restrict will provide notifications and Protect will not

Question 7

What are the 2 ways MAC address learning can be performed?

Answer 7

Manual and Sticky (learned dynamically)