Exam 350-601 topic 1 question 414 discussion

For now I think B is right because NTFY = F, but I'm not 100% sure if is the correct solution

Protect because NTFY is F

protect ad NTFY is set to false in the exibit

I will vote for A - restrict, from Cisco 9000 guide: Protect mode is not supported on 7.0(3)I5(2) release

restrict should be the one

I will vote for B as normally admins should be informed about that incident

Protect—This mode permits traffic from known MAC addresses to continue to be forwarded while dropping traffic from unknown MAC addresses when over the allowed MAC address limit. When configured with this mode, no notification action is taken when traffic is dropped. Restrict—This mode permits traffic from known MAC addresses to continue to be forwarded while dropping traffic from unknown MAC addresses when over the allowed MAC address limit. When configured with this mode, a syslog message is logged, a Simple Network Management Protocol (SNMP) trap is sent, and a violation counter is incremented when traffic is dropped.

I think A or B, both could be correct.

A is correct Example: Configuring Port Security on an Orphan Port https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x_chapter_010101.html

B is correct