You need to allow one host to be permitted to attach dynamically to each switch interface. Which two commands must you configure on your catalyst switch to meet this policy?<br>1. Switch (config-if) # <code class="args"><em>ip access-group 10</em></code><br>2. Switch (config-if) # <code class="args"><em>switchport port-security maximum 1</em></code><br>3. Switch (config) # <code class="args"><em>access-list 10 permit ip host 1</em></code><br>4. Switch (config-if) # <code class="args"><em>switchport port-security violation shutdown</em></code><br>5. Switch (config) # <code class="args"><em>mac-address-table secure</em></code>

Correct Answer: 2 and 4
The switchport port-security is an important command, and it's super easy with the CNA; however, from the CLI, you can set the maximum number of MAC addresses allowed into the port, and then set the penalty if this maximum has been passed.