nerdexam
Cisco

200-301 · Question #328

What are two recommendations for protecting network ports from being exploited when located in an office space outside of an IT closet? (Choose two)

The correct answer is C. implement port-based authentication E. shut down unused ports. The 802.1x standard defines a client-server-based access control and authentication protocol that prevents unauthorized clients from connecting to a LAN through publicly accessible ports unless they are properly authenticated. The authentication server authenticates each client c

Submitted by wei.xz· Mar 5, 2026Security Fundamentals

Question

What are two recommendations for protecting network ports from being exploited when located in an office space outside of an IT closet? (Choose two)

Options

  • Aconfigure static ARP entries
  • Benable the PortFast feature on ports
  • Cimplement port-based authentication
  • Dconfigure ports to a fixed speed
  • Eshut down unused ports

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    14% (4)
  • C
    75% (21)
  • D
    7% (2)

Explanation

The 802.1x standard defines a client-server-based access control and authentication protocol that prevents unauthorized clients from connecting to a LAN through publicly accessible ports unless they are properly authenticated. The authentication server authenticates each client connected to a switch port before making available any services offered by the switch or the LAN. Unused or “empty” ports within any network device pose a security risk, as someone might plug a cable into them and connect an unauthorised device to the network. This can lead to a number of issues, including: Network not functioning as it should Network information vulnerable to outsiders Therefore, you should shut down every port that is not used on routers, switches, and other network devices. Depending upon the device, the shutdown state might be the default, but you should always verify this.

Topics

#port security#802.1x#unused ports#physical access control

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice