nerdexam
Cisco

200-301 · Question #810

An administrator has connected devices to a switch and, for security reasons, wants the dynamically learned MAC addresses from the address table added to the running configuration. Which action must b

The correct answer is B. Enable port security and use the keyword sticky.. To dynamically learn MAC addresses and add them to the running configuration for security, port security must be enabled with the sticky keyword.

Submitted by thandi_sa· Mar 5, 2026Security Fundamentals

Question

An administrator has connected devices to a switch and, for security reasons, wants the dynamically learned MAC addresses from the address table added to the running configuration. Which action must be taken to accomplish this?

Options

  • AUse theno switchport port-security command to allow MAC addresses to be added to the
  • BEnable port security and use the keyword sticky.
  • CSet the switchport mode to trunk and save the running configuration.
  • DUse theswitchport protectedcommand to have the MAC addresses added to the configuration.

How the community answered

(45 responses)
  • A
    11% (5)
  • B
    82% (37)
  • C
    4% (2)
  • D
    2% (1)

Why each option

To dynamically learn MAC addresses and add them to the running configuration for security, port security must be enabled with the sticky keyword.

AUse theno switchport port-security command to allow MAC addresses to be added to the

The no switchport port-security command disables port security, which would prevent the switch from learning or securing MAC addresses, directly contradicting the goal.

BEnable port security and use the keyword sticky.Correct

Enabling port security with the mac-address sticky command allows the switch to dynamically learn MAC addresses connected to the port and then save these learned addresses as "sticky" secure MAC addresses in the running configuration. These addresses become part of the configuration and persist across reboots if the configuration is saved.

CSet the switchport mode to trunk and save the running configuration.

Setting the switchport mode to trunk configures the port for carrying multiple VLANs and has no direct function in dynamically learning MAC addresses and adding them to the running configuration for security purposes.

DUse theswitchport protectedcommand to have the MAC addresses added to the configuration.

switchport protected is not a standard command for adding dynamically learned MAC addresses to the configuration. While protected is a port security violation mode option, it does not perform the desired function.

Concept tested: Port security sticky MAC addresses

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/consolidated/configuration_guide/b_consolidated_3se_3850_cg/b_consolidated_3se_3850_cg_chapter_0110111.html#concept_3593B6E4E2C74618BA91799D05F7C733

Topics

#Port security#Sticky MAC#MAC address learning#Layer 2 security

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice