Cisco Certified Network Associate (CCNA) Practice Exam

Which command is used to configure a MAC access list on a switch?

1. SW1(config-if)#mac access-group in/out

2. SW1(config)#mac access-list extended LIST NAME

3. SW1#show access-list

4. SW1(config)#interface INTERFACE

The correct answer is: SW1(config)#mac access-list extended LIST NAME

The command used to configure a MAC access list on a switch is "SW1(config)#mac access-list extended LIST NAME" because it directly establishes a MAC access control list (ACL) in the switch's configuration mode. This command allows the network administrator to define a list of rules that can permit or deny traffic based on MAC addresses. In Cisco switches, MAC access lists are essential for filtering traffic based on the MAC address of frames, which can enhance security and manage bandwidth effectively. By creating an extended MAC access list, you can specify various conditions and actions based on the source and destination MAC addresses, allowing for more granular control over traffic flow in the network. The other options relate to different functionalities that do not specifically configure a MAC access list. For instance, access-group command relates to applying access lists to interfaces, while the show access-list command displays existing access lists. The interface command is used for entering interface configuration mode but does not imply creating a MAC access list. Hence, the correct command for configuring a MAC access list is key to ensuring the desired traffic behavior on a switch.