Question

A network engineer is hardening access-layer switches at a branch office. On interface Gi0/5, connected to a shared conference-room jack, they must dynamically learn and retain the first two MAC addresses across reboots, keep the port operational if a third device connects, drop the offending frames, and increment the violation counter for logging. Which configuration meets all of these requirements?

Accepted Answer

switchport port-security maximum 2 / switchport port-security mac-address sticky / switchport port-security violation restrict

Answer

switchport port-security maximum 2 / switchport port-security mac-address sticky / switchport port-security violation shutdown

Answer

switchport port-security maximum 2 / switchport port-security mac-address sticky / switchport port-security violation protect

Answer

switchport port-security maximum 3 / switchport port-security mac-address dynamic / switchport port-security violation restrict