Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GSNA Exam - Topic 5 Question 90 Discussion

Posted by Shawnda on Aug 16, 2026 at 01:26 AM

You work as a Network Administrator for Net Perfect Inc. The company has a small TCP/IP-based network environment. The network contains a Cisco Catalyst 6000 family switch. A few sales people come to your outer office and use your local network to access the Internet, as well as to demonstrate their products. What will you do to prevent your network from being accessed by any outside computers?

Suggested Answer: A

According to the question, you are required to prevent outside computers from accessing your network. You should therefore configure the

switch's port access based on the MAC address, which can be done by configuring port security. Port security is a feature of Cisco Catalyst

series switches. Port security is used to block input based on the media access control (MAC) address to an Ethernet, Fast Ethernet, or Gigabit

Ethernet port. It denies the port access to a workstation when the MAC address of the station attempting to access the port is different from

any of the MAC addresses specified for that port.

Answer B and C are incorrect. A firewall is used to protect an internal network or intranet against unauthorized access from the

Internet or other outside networks.

Answer D is incorrect. A port scanner is a software tool that is designed to search a network host for open ports. This tool is often used

by administrators to check the security of their networks. It is also used by hackers to compromise the network and systems.


Get Premium GSNA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
DO
Dominga
C) MAC address blocking? Isn't that a bit outdated?
LA
Lashonda 5 days ago
I think B) is better for blocking unwanted traffic.
LA
Larue 10 days ago
A) Port security is a solid choice!
AL
Alaine 15 days ago
I’m not sure about C, isn’t MAC address blocking not very effective?
EI
Eileen 21 days ago
B) Firewall for IP blocking is the way to go!
KA
Kayleigh 26 days ago
Wait, can a firewall really block MAC addresses? Sounds tricky.
CH
Chantell 1 month ago
Totally agree, port security is essential!
JE
Jeanice 1 month ago
A) Configure port security is a solid choice.
AJ
Aja 1 month ago
I’m a bit confused about the role of a port scanner here. I thought it was more for detecting vulnerabilities rather than preventing access.
DI
Dick 2 months ago
I practiced a similar question about securing a network, and I feel like port security is the way to go, but I could be wrong.
BO
Bobbie 2 months ago
I think configuring a firewall for IP blocking makes sense, but I wonder if MAC address blocking would be more secure in this case.
EM
Emilio 2 months ago
I remember studying port security, but I'm not entirely sure how effective it is against outside computers.
0/2000 characters

Save Cancel