After the rogue reports from Cisco Prime Infrastructure are reviewed, it is determined that the automatic rogue mitigation is not working as planned. Which security measure must be taken to help preve

Port security allows an administrator to limit the number of valid MAC addresses on a switchport, and can shut down or restrict a port when an unknown device such as a rogue AP is plugged in. This directly prevents rogue APs from gaining network access at the physical layer. It is the most effective mitigation because it acts before the rogue AP can pass any traffic.

A MAC filter on a switch requires pre-knowing the rogue device's MAC address, making it reactive rather than preventive against unknown rogue APs.

Spanning Tree Protocol prevents Layer 2 loops in a switched network and has no mechanism to block unauthorized devices from connecting to a port.

IP access lists filter traffic based on IP addresses at Layer 3 but cannot prevent a rogue AP from physically connecting and operating on the network.