Question

A network administrator is configuring port security on a cisco switch. the company security policy specifies that when a violation occurs, packets with unknown source addresses should be dropped and no notification should be sent. which violation mode should be configured on the interfaces? off

Answer 1

There are three different main violation types: shutdown, protect, and restrict.
1. Shutdown violation mode:When a violation occurs, the switchport will be taken out of service and placed in the disabled state. This is the default switchport security violation mode. 
2. Protect violation mode: When a violation occurs in this mode, the switchport will permit traffic from known MAC addresses to continue sending traffic while dropping traffic from unknown MAC addresses. 
3. Restrict violation mode: When a violation occurs in this mode, the switchport will permit traffic from known MAC addresses to continue sending traffic while dropping traffic from unknown MAC addresses. 
In our case there are two possibilities: the network administrator can configure both protect violation mode and restrict violation mode, because both modes drop packets from unknown source addresses when a violation occurs.