HP0-Y50 · Question #112
A network architect is designing a solution for a customer who wants better security on edge ports. Recently, an unauthorized individual was able to connect a snooping device to an open port (in…
The correct answer is A. Place open ports in a VLAN that is not carried on uplinks. See the full explanation below for the reasoning.
Question
A network architect is designing a solution for a customer who wants better security on edge ports. Recently, an unauthorized individual was able to connect a snooping device to an open port (in other words, to a switch port that is active but not connected to a customer device). The customer wants to prevent this from happening again. However, the customer wants to avoid implementing 802.1X on ports because the IT staff is not prepared to deploy and manage such a solution. What is the simplest way to minimize the risk of another unauthorized connection without adding a lot of management overhead?
Options
- APlace open ports in a VLAN that is not carried on uplinks.
- BImplement MAC lockdown (as opposed to MAC authentication) on all open ports.
- CApply MAC authentication to the open ports and allow only known MAC addresses
- DApply dynamic port access control lists (ACLs) to open ports.
How the community answered
(45 responses)- A80% (36)
- B2% (1)
- C11% (5)
- D7% (3)
Community Discussion
No community discussion yet for this question.