A visitor plugs a laptop into a network jack in the lobby and is able to connect to the company's network. Which of the following should be configured on the existing network infrastructure to best…

The correct answer is A. Port security. Port security on a network switch restricts which devices can connect to a physical port - typically by limiting access to approved MAC addresses - so an unknown laptop plugging into a lobby jack would be blocked or quarantined before gaining network access. B (Web Application…

Submitted by kev92· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

A visitor plugs a laptop into a network jack in the lobby and is able to connect to the company's network. Which of the following should be configured on the existing network infrastructure to best prevent this activity?

Options

APort security
BWeb application firewall
CTransport layer security
DVirtual private network

How the community answered

(24 responses)

A
71% (17)
B
4% (1)
C
8% (2)
D
17% (4)

Explanation

Port security on a network switch restricts which devices can connect to a physical port - typically by limiting access to approved MAC addresses - so an unknown laptop plugging into a lobby jack would be blocked or quarantined before gaining network access.

B (Web Application Firewall) filters HTTP/HTTPS traffic at the application layer; it does nothing to prevent a device from physically connecting to the network in the first place. C (Transport Layer Security) encrypts data in transit but doesn't control who can join the network. D (VPN) creates encrypted tunnels for remote access, which is irrelevant to someone already plugged directly into a local jack.

Memory tip: Think of port security as a bouncer at the physical door - it checks your ID (MAC address) before you get in, rather than watching what you do once you're inside.

Topics

#Network security#Port security#Access control#Physical security

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice