Cisco Certified Network Associate (CCNA) Practice Exam

What happens when a port security violation restrict occurs?

1. Keeps port down while allowing data transmission

2. Keeps port in upstate but does not allow it to send or receive data and sends an error report

3. Keeps port in forwarding state

4. Keeps port disabled indefinitely

The correct answer is: Keeps port in upstate but does not allow it to send or receive data and sends an error report

When a port security violation occurs with the restrict mode configured, the switch port remains in an up state allowing the interface to stay active, but it does not permit any data transmission towards or from that port. Importantly, the violation in this mode causes the switch to increment a violation counter, and typically, it logs the event and can send SNMP traps or syslog messages to notify administrators of the security violation. This means that while the port is operational, it is effectively preventing unauthorized devices from communicating through it, fulfilling the security policy intended to control access. The operational behavior of restrict mode thus balances functionality with security, ensuring network administrators are informed of any breaches while still allowing the port to stay linked and available for potential legitimate use or monitoring.