nerdexam
Cisco

350-401 · Question #707

Which command address learning on the configures port security on a switch to enable permanent MAC interface?

The correct answer is C. switchport port-security mac-address sticky. The switchport port-security mac-address sticky command enables port security to dynamically learn MAC addresses and then convert them into static entries in the running configuration.

Submitted by tarun92· Mar 6, 2026Security

Question

Which command address learning on the configures port security on a switch to enable permanent MAC interface?

Options

  • Aswitchport port-security mac-address-learning enable
  • Bswitchport port-security mac-address timer 0
  • Cswitchport port-security mac-address sticky
  • Dswitchport port-security mac-address maximum 1 sticky
  • Eswitchport port-security mac-address permanent

How the community answered

(33 responses)
  • B
    3% (1)
  • C
    88% (29)
  • D
    6% (2)
  • E
    3% (1)

Why each option

The `switchport port-security mac-address sticky` command enables port security to dynamically learn MAC addresses and then convert them into static entries in the running configuration.

Aswitchport port-security mac-address-learning enable

There is no standard `switchport port-security mac-address-learning enable` command for this functionality; learning behavior is controlled by `sticky` or `dynamic` modes.

Bswitchport port-security mac-address timer 0

`switchport port-security mac-address timer 0` configures the aging time for dynamically learned secure MAC addresses to never age, but it doesn't enable the sticky learning mechanism itself.

Cswitchport port-security mac-address stickyCorrect

The `switchport port-security mac-address sticky` command enables sticky MAC address learning. This feature allows the switch to dynamically learn MAC addresses from traffic on the port and then convert these learned addresses into static, secure MAC addresses in the running configuration, effectively making them 'permanent' for port security enforcement until explicitly removed or the configuration is cleared.

Dswitchport port-security mac-address maximum 1 sticky

`switchport port-security mac-address maximum 1 sticky` enables sticky learning and sets a maximum, but the core command for enabling the sticky learning functionality is `switchport port-security mac-address sticky`.

Eswitchport port-security mac-address permanent

There is no `switchport port-security mac-address permanent` command; static MAC addresses are manually configured, and sticky MACs provide the 'permanent learned' behavior.

Concept tested: Port security sticky MAC addresses

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_55_se/configuration/guide/scg/swports.html#wp1124652

Topics

#Port security#MAC address learning#Cisco switch configuration#Sticky MAC

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice