A network administrator is asked to configure VLANS 2, 3 and 4 for a new implementation. Some ports must be assigned to the new VLANS with unused remaining. Which action should be taken for the unused

Configuring unused ports in the native VLAN (often VLAN 1 by default) can be a security risk as VLAN 1 is often routed or used for management, providing potential unauthorized network access.

Configuring unused ports in a "black hole" VLAN, an isolated VLAN with no routed interfaces, prevents unauthorized access if someone connects to an unused port. This significantly enhances network security by ensuring that any device connected to such a port cannot access active network resources.

While using a nondefault native VLAN can improve security in some contexts, simply configuring unused ports in any nondefault native VLAN without making it an isolated "black hole" VLAN does not guarantee the same level of security.

Configuring ports as access ports is a necessary step, but it doesn't specify which VLAN they should be assigned to; assigning them to an active VLAN would be insecure if the ports are unused.