nerdexam
Cisco

350-701 · Question #609

350-701 Question #609: Real Exam Question with Answer & Explanation

The correct answer is C. sticky. To restrict laptops to specific switch ports and prevent users from moving them, configure port security with the sticky MAC address setting, which dynamically learns MAC addresses and then converts them to static secure MAC addresses.

Submitted by naveen.iyer· Mar 30, 2026

Question

An engineer must set up 200 new laptops on a network and wants to prevent the users from moving their laptops around to simplify administration. Which switch port MAC address security setting must be used?

Options

  • Aaging
  • Bstatic
  • Csticky
  • Dmaximum

Explanation

To restrict laptops to specific switch ports and prevent users from moving them, configure port security with the sticky MAC address setting, which dynamically learns MAC addresses and then converts them to static secure MAC addresses.

Common mistakes.

  • A. aging is a setting for port security that defines how long a secure MAC address remains valid before it's removed; it doesn't prevent movement, but controls the lifespan of learned addresses.
  • B. static secure MAC addresses are manually configured for a port, which would be administratively burdensome for 200 new laptops and doesn't simplify administration.
  • D. maximum is a setting that defines the maximum number of secure MAC addresses allowed on a port; it doesn't prevent movement, but rather limits the number of devices.

Concept tested. Port Security MAC sticky setting

Reference. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_55_se/configuration/guide/3560_scg/swportsec.html

Topics

#Switch port security#Sticky MAC

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice