220-802 Question #159: Real Exam Question with Answer & Explanation

The correct answer is D: Disable the extra ports on the router.. Disabling unused switch or router ports prevents unauthorized physical devices from gaining any network access at all.

Question

A technician recently setup a new wired network and wants to ensure only their computers can use it. Which of the following is the MOST secure way to accomplish this?

Options

AMake sure the computers are using strong passwords.
BEnable an intrusion detection system.
CAssign the computers static IP addresses.
DDisable the extra ports on the router.

Explanation

Disabling unused switch or router ports prevents unauthorized physical devices from gaining any network access at all.

Common mistakes.

A. Strong passwords protect accounts but do not prevent an unauthorized computer from physically plugging in and accessing the network.
B. An intrusion detection system monitors and alerts on suspicious traffic but does not block an unauthorized device from initially connecting.
C. Static IP addresses do not prevent an unauthorized device from using an unconfigured IP address to access the network.

Concept tested. Physical port security on network switches and routers

Reference. https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/10556-42.html

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice