An office port should allow only two learned endpoint MAC addresses. Which feature is the best fit?

1. A DHCP scope of two addresses
2. Root bridge priority
3. Dynamic ARP inspection alone
4. Switchport port security