SY0-701 Question 219

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  MAC address table flooding (also known as CAM table flooding) is a Layer 2 attack where an attacker sends numerous frames with fake MAC addresses to a switch. This overwhelms the switch’s MAC address table, causing it to fail open and flood traffic out all ports—allowing the attacker to sniff sensitive data. Port security directly mitigates this by: Limiting the number of MAC addresses learned on a port. Blocking or shutting down ports when unauthorized MAC addresses are detected. Allowing only specific MAC addresses to communicate through a port

• Chose B2

  The attack described, flooding the MAC address table of network switches, is known as a MAC flooding attack or CAM table overflow attack. The best mitigation for this specific type of attack among the choices is: B. Port security

• 31

  Port security is a feature on network switches that allows you to limit the number of MAC addresses that can be learned on a specific port. If the limit is exceeded, the switch can take predefined actions such as shutting down the port, restricting traffic, or generating alerts. This effectively prevents attackers from overwhelming the switch with a large number of MAC addresses, which could otherwise cause the switch to behave like a hub, sending traffic to all ports and potentially exposing sensitive data. (B)