What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

IT Exam Items Repository › Category: CCNA › What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

Disable DTP.
Disable STP.
Enable port security.
Place unused ports in an unused VLAN.

Explanation: A MAC address (CAM) table overflow attack, buffer overflow, and MAC address spoofing can all be mitigated by configuring port security. A network administrator would typically not want to disable STP because it prevents Layer 2 loops. DTP is disabled to prevent VLAN hopping. Placing unused ports in an unused VLAN prevents unauthorized wired connectivity.

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

About The Author

ITExamAnswers Editorial Team