A network administrator wants to ensure that only the server can connect to port Fa0/1 on a Catalyst switch. The server is plugged into the switch Fa0/1 port and the network administrator is about to

Switches operate at Layer 2 and do not natively filter based on IP addresses on access ports; IP-based filtering requires Layer 3 ACLs and would not prevent a different device from using the same IP.

Using a proprietary connector type is a physical/hardware measure outside the scope of switch configuration and is not a valid network administration technique.

Configuring the server's MAC address as a static entry on port Fa0/1 permanently binds that MAC to the port in the switch's MAC address table, so frames sourced from any other MAC on that port are treated as a violation and dropped.

Binding an IP address to a MAC (static ARP) prevents IP spoofing in the ARP table but does not prevent a different device with a different MAC from connecting to the switch port.

Enabling port security on Fa0/1 with the server's MAC address as the allowed address instructs the switch to monitor source MAC addresses on that port and take a configured violation action (shutdown, restrict, or protect) if any other MAC is detected, enforcing Layer 2 access control.

A switch access list filtering server traffic from entering other ports does not prevent unauthorized devices from connecting to Fa0/1 itself; it addresses the wrong direction of the security requirement.