How does a switch handle a frame with an unknown destination MAC?

When a switch receives a frame with a destination MAC address that is not in its MAC address table, it floods the frame out of all ports except the port on which it was received (the ingress port). This ensures the frame reaches the intended recipient if that device is connected to the switch. Once the destination device responds, the switch learns its MAC address and updates its table, preventing future flooding for that specific destination. "Forwarded to the first available port" is incorrect because switches use MAC addresses for forwarding decisions, not port availability. "Broadcast to all ports on the switch" is incorrect because while flooding sends to many ports, it's not a true Layer 2 broadcast (which uses a specific broadcast MAC address). "Inspected and dropped by the switch" is incorrect; switches only drop frames under specific conditions like errors or security policies, not simply due to an unknown destination MAC.