The network security policy requires that only one host be permitted to attach dynamically to each switch interface. If that policy is violated, the interface should shut down. Which two commands must the network administrator configure on the 2950 Catalyst switch to meet this policy?（）

A. TestKing1(config-if)# switchport port-security maximum 1
B. TestKing1(config)# mac-address-table secure
C. TestKing1(config)# access-list 10 permit ip host
D. TestKing1(config-if)# switchport port-security violation shutdown
E. TestKing1(config-if)# ip access-group 10