Bob, a network administrator at BigUniversity, realized that some students are connecting their notebooks in the wired network to have Internet access. In the university campus, there are many Etherne

Disabling unused ports in switches is a good security practice to reduce the attack surface, but it does not prevent unauthorized access on ports that must remain enabled for legitimate users.

Separating students into a different VLAN might segment network traffic, but it does not prevent unauthorized devices from connecting to a wired port that belongs to a different, potentially more privileged, VLAN.

The 802.1X protocol provides port-based network access control, requiring devices to authenticate themselves to an authentication server (like RADIUS) before being granted access to the network through a switch port. This prevents unauthorized users or devices from simply plugging into an available Ethernet port and gaining network access.

Asking students to use the wireless network is an administrative policy, not a technical control, and it does not prevent them from attempting to bypass this policy by connecting to wired ports.