nerdexam
Cisco

350-701 · Question #609

An engineer must set up 200 new laptops on a network and wants to prevent the users from moving their laptops around to simplify administration. Which switch port MAC address security setting must…

The correct answer is C. sticky. To restrict laptops to specific switch ports and prevent users from moving them, configure port security with the sticky MAC address setting, which dynamically learns MAC addresses and then converts them to static secure MAC addresses.

Submitted by naveen.iyer· Mar 30, 2026Network Security

Question

An engineer must set up 200 new laptops on a network and wants to prevent the users from moving their laptops around to simplify administration. Which switch port MAC address security setting must be used?

Options

  • Aaging
  • Bstatic
  • Csticky
  • Dmaximum

How the community answered

(52 responses)
  • B
    2% (1)
  • C
    94% (49)
  • D
    4% (2)

Why each option

To restrict laptops to specific switch ports and prevent users from moving them, configure port security with the `sticky` MAC address setting, which dynamically learns MAC addresses and then converts them to static secure MAC addresses.

Aaging

`aging` is a setting for port security that defines how long a secure MAC address remains valid before it's removed; it doesn't prevent movement, but controls the lifespan of learned addresses.

Bstatic

`static` secure MAC addresses are manually configured for a port, which would be administratively burdensome for 200 new laptops and doesn't simplify administration.

CstickyCorrect

The `sticky` MAC address security setting on a switch port learns the MAC address of the first device connected to that port and then automatically adds it to the running configuration as a static secure MAC address. If a different MAC address attempts to connect, the port goes into an error-disabled state, effectively preventing unauthorized device movement.

Dmaximum

`maximum` is a setting that defines the maximum number of secure MAC addresses allowed on a port; it doesn't prevent movement, but rather limits the number of devices.

Concept tested: Port Security MAC sticky setting

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_55_se/configuration/guide/3560_scg/swportsec.html

Topics

#port security#sticky MAC#MAC address security#switch security

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice