An analyst receives an alert from the SIEM showing an IP address that does not belong to the assigned network can be seen sending packets to the wrong gateway. Which of the following network devices…

A firewall with an Access Control List (ACL) filters traffic but does not address the underlying issue of a device acquiring an IP address from the wrong network segment.

While routers handle subnets, the problem describes a device acquiring an incorrect IP address and gateway due to a Layer 2 issue (VLANs), not a misconfigured subnet on the router interface itself.

The problem describes a device obtaining an IP address from an unintended network and sending traffic to a gateway not associated with its assigned network, pointing to a Layer 2 VLAN misconfiguration. If a switch port intended for inter-VLAN routing (e.g., connected to a router-on-a-stick) or an inter-switch link is incorrectly configured as an access port, it restricts communication for other VLANs, leading to incorrect IP assignments or unreachable correct gateways. Changing the switch port from access to trunk mode (`switchport mode trunk`) correctly enables multiple VLANs to traverse the link, resolving the root cause of the incorrect network configuration.

A proxy server operates at the application layer to manage client requests and content, having no direct role in how a device obtains its network layer IP address or communicates with a gateway.