A.The port has security enabled and has shut down due to a security violation.
B.The port is operational and has reached its configured maximum allowed number of MAC addresses.
C.The port will allow access for 11 MAC addresses in addition to the 3 configured MAC addresses.
D.If the number of devices attempting to access the port exceeds 11， the port will shut down for 20 minutes， as configured.

A.PACLs can be applied in the inbound or outbound direction of a Layer 2 physical interface. 
B.At Layer 2， a MAC address PACL will take precedence over any existing Layer 3 PACL.
C.When you apply a port ACL to a trunk port， the ACL filters traffic on all VLANs present on the trunk port.
D.PACLs are not supported on EtherChannel interfaces.