Two employees in the Sales department work different shifts with their laptop computers and share the same Ethernet port in the office. Which set of commands would allow only these two laptops to use the Ethernet port and create violation log entry without shutting down the port if a violation occurs?

Question:
Two employees in the Sales department work different shifts with their laptop computers and share the same Ethernet port in the office. Which set of commands would allow only these two laptops to use the Ethernet port and create violation log entry without shutting down the port if a violation occurs?

• switchport mode access
  switchport port-security
• switchport mode access
  switchport port-security
  switchport port-security maximum 2
  switchport port-security mac-address sticky
  switchport port-security violation restrict
• switchport mode access
  switchport port-security maximum 2
  switchport port-security mac-address sticky
• switchport mode access
  switchport port-security maximum 2
  switchport port-security mac-address sticky
  switchport port-security violation protect

Explanation: The switchport port-security command with no parameters must be entered before any other port security options. The parameter maximum 2 ensures that only the first two MAC addresses detected by the switch are allowed. The mac-address sticky option allows the switch to learn the first two MAC addresses that come into the specific port. The violation restrict option keeps track of the number of violations.

Exam with this question: CCNA 2 (v5.0.3 + v6.0) Final Exam Answers