A penetration tester finds an unused Ethernet port during an on-site penetration test. Upon plugging a device into the unused port, the penetration tester notices that the machine is assigned an IP…

The correct answer is A. Port security. Port security (A) is correct because it's a network switch feature that restricts which devices can connect to a physical port - typically by limiting or binding allowed MAC addresses, so an unauthorized device plugged into an unused port is blocked from receiving network…

Submitted by hans_de· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

A penetration tester finds an unused Ethernet port during an on-site penetration test. Upon plugging a device into the unused port, the penetration tester notices that the machine is assigned an IP address, allowing the tester to enumerate the local network. Which of the following should an administrator implement in order to prevent this situation from happening in the future?

Options

APort security
BTransport Layer Security
CProxy server
DSecurity zones

How the community answered

(50 responses)

A
92% (46)
B
2% (1)
C
4% (2)
D
2% (1)

Explanation

Port security (A) is correct because it's a network switch feature that restricts which devices can connect to a physical port - typically by limiting or binding allowed MAC addresses, so an unauthorized device plugged into an unused port is blocked from receiving network access.

TLS (B) encrypts data in transit between endpoints but does nothing to prevent an unknown device from joining the network in the first place. A proxy server (C) routes and filters traffic for devices already on the network - it has no mechanism to block physical port access. Security zones (D) segment a network logically (e.g., DMZ vs. internal), but without port-level enforcement, a device can still gain access to a zone simply by plugging in.

Memory tip: Think of port security as a "bouncer at the door" - it checks your ID (MAC address) before you're even allowed inside the building, while the other options only deal with what happens after you're already in.

Topics

#Port security#Network access control#Switch security

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice