Which of the following is a network hardening technique that can be found on switches to prevent unauthorized devices from connecting?

Optimize your success on the FSNA Readiness Exam. Engage with flashcards and multiple choice questions, each designed with hints and explanations. Prepare thoroughly for your test and excel!

Multiple Choice

Which of the following is a network hardening technique that can be found on switches to prevent unauthorized devices from connecting?

Port security is a switch feature that controls access at the port level by binding a limited set of MAC addresses to a port. This means only devices with those authorized MAC addresses can send frames through that specific port. If a device with a different MAC tries to connect, the switch detects a violation and can take action such as blocking traffic, restricting it, or shutting the port down completely. This directly prevents unauthorized devices from plugging in and gaining network access, which is exactly what you want for basic network hardening at the access layer. VPN is about creating secure tunnels between networks or hosts, not preventing a device from physically connecting to a switch port. NAT translates private addresses to public ones and isn’t about device authentication on a switch. An ACL can filter traffic after a connection is established, but it doesn’t stop a rogue device from connecting to the port in the first place. Port security specifically addresses the step of controlling which devices are allowed to connect to a switch port.

Port security is a switch feature that controls access at the port level by binding a limited set of MAC addresses to a port. This means only devices with those authorized MAC addresses can send frames through that specific port. If a device with a different MAC tries to connect, the switch detects a violation and can take action such as blocking traffic, restricting it, or shutting the port down completely. This directly prevents unauthorized devices from plugging in and gaining network access, which is exactly what you want for basic network hardening at the access layer.

VPN is about creating secure tunnels between networks or hosts, not preventing a device from physically connecting to a switch port. NAT translates private addresses to public ones and isn’t about device authentication on a switch. An ACL can filter traffic after a connection is established, but it doesn’t stop a rogue device from connecting to the port in the first place. Port security specifically addresses the step of controlling which devices are allowed to connect to a switch port.

More practice questions