Option D statically associates User2’s MAC address B with Ethernet1/2 and User1’s MAC address A with Ethernet1/1 on VTEP1. Static secure MAC-address entries remain in the running and saved configuration, allowing them to persist after an interface or device restart. On VTEP2, configuring the port-security aging time as zero on Ethernet1/3 prevents the secure MAC address of the web server from aging out. Option A configures sticky learning only on Ethernet1/2 and does not preserve User1’s specific MAC address or disable aging for the server. Option B uses inactivity aging, which can still remove the server’s MAC address, and does not correctly identify both user MAC addresses. Option C enables basic port security without creating persistent MAC bindings and disables port security on the web-server interface.