Refer to the exhibit. 
What three actions will the switch take when a frame with an unknown source MAC address
arrives at the interface? (Select three.)
A.
Send an SNMP trap.
B.
Send a syslog message.
C.
Increment the Security Violation counter.
D.
Forward the traffic.
E.
Write the MAC address to the startup-config.
F.
Shut down the port.
Explanation:
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/20ewa/configuration/guide/port_
sec.html