Match each switching feature to its most accurate purpose.

Technical deep dive

How to think about this question

PortFast is a Cisco Catalyst switch feature that immediately transitions a switch port configured as an edge port into the forwarding state, bypassing the usual Spanning Tree Protocol (STP) listening and learning states. This reduces the delay for devices like workstations or IP phones to start communicating on the network, which is critical in access layer environments where end devices connect. PortFast only applies to ports connected to end devices, not to other switches, to prevent loops. BPDU Guard complements PortFast by protecting edge ports from receiving Bridge Protocol Data Units (BPDUs). If a BPDU is detected on a PortFast-enabled port, BPDU Guard disables the port to prevent potential Layer 2 loops caused by unauthorized switches or misconfigurations. This mechanism enforces the assumption that edge ports should not participate in STP topology changes, enhancing network stability and security. Port Security and DHCP Snooping address different security concerns at the access layer. Port Security restricts the number of MAC addresses learned on a port and can lock down ports to specific MAC addresses, preventing MAC flooding attacks and unauthorized device connections. DHCP Snooping filters DHCP messages, blocking rogue DHCP servers and building a binding table that maps IP addresses to MAC addresses and switch ports. This binding is used by other features like Dynamic ARP Inspection to prevent IP spoofing. Together, these features enforce secure and stable Layer 2 access networks.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask