Which Switch Port MAC Security Setting Prevents Laptop Movement?
An engineer must set up 200 new laptops on a network and wants to prevent the users from moving their laptops around to simplify administration. Which switch port MAC address security setting must be used?
Community Votes
83% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
Tests the distinction between static and sticky secure MAC addresses; the trap is assuming that preventing laptop movement requires manually configured static entries.
Cisco switch port security sticky MAC learning automatically binds 200 laptops to their access ports without manual static entries. This page explains why the correct 350-701 answer is sticky rather than static.
Choosing static (B) because it sounds most restrictive; manually configuring 200 MAC addresses defeats the question's explicit goal of simplifying administration.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The question asks for a MAC address security setting that both prevents laptop movement and simplifies administration for 200 new laptops. Sticky secure MAC addresses meet both requirements because the switch dynamically learns each laptop's MAC address on its first connection and then adds that address to the running configuration as a sticky entry. Administrators do not have to manually type 200 MAC-to-port bindings, which is exactly the administrative simplification the scenario calls for. Once learned, the sticky binding causes a port-security violation if the same laptop is moved to another protected port, deterring users from relocating their devices. This is why option C is the correct Cisco 350-701 answer.Why the Other Options Are Wrong
Aging (A) is a timer that controls how long dynamically learned secure MAC addresses stay in the MAC address table; it does not create a persistent binding or simplify the rollout of 200 laptops. Static (B) does prevent a laptop from moving because the MAC is manually tied to the port, but it requires entering all 200 MAC addresses by hand, which directly contradicts the stated goal of simplifying administration. Maximum (D) specifies how many MAC addresses a port can learn, but it is a limit rather than a binding method; with only maximum configured, users could still move laptops and the new port would learn them as long as the limit is not exceeded. Therefore, static is operationally heavy and maximum/aging do not satisfy the binding requirement.Community Comment Notes
As eafea4d noted, sticky "simplifies" administration, which is the exact phrase the question uses as its secondary requirement. NullNull88 reinforced the practical objection to static by writing that "Nobody wants to enter 200 static entries". A minority comment from wowako argued for static because manually set MACs cannot change, but that reasoning ignores the administration-simplification clause and the Cisco exam's intent for large deployments. The community vote strongly favors sticky, and that consensus matches the correct port-security behavior.Exam Strategy
When a port-security question mentions a large number of devices plus simplified administration, sticky learning is almost always the intended answer. Static MAC security is the distractor because it is more restrictive but operationally heavy; aging and maximum are tuning parameters, not binding methods.
Frequently Asked Questions
Why is static port security wrong for 200 laptops?
Static requires manually entering each MAC address on each port, which contradicts the goal of simplifying administration for 200 new laptops.
How does sticky MAC learning prevent laptop movement?
Once a laptop's MAC is learned on a port and stored as sticky, connecting that laptop to another protected port triggers a port-security violation.