a network administrator configures the port security feature on a switch. the security policy specifies that each access port should allow up to two mac addresses. when the maximum number of mac addresses is reached, a frame with the unknown source mac address is dropped and a notification is sent to the syslog server. which security violation mode should be configured for each access port?