200-301 Question 409
Single answerA network administrator is tasked with implementing a secure method to prevent unauthorized devices from connecting to their corporate network via the access layer switches. Which technique should the administrator prioritize to achieve this goal?
- A
Port Security
- B
Spanning Tree Protocol (STP)
- C
Dynamic Host Configuration Protocol (DHCP) Snooping
- D
Network Address Translation (NAT)
Show answer and explanation
Correct answer: A
Explanation
Port Security is the most effective technique for preventing unauthorized devices from connecting to a network via access layer switches. By configuring Port Security, the administrator can limit devices based on MAC addresses, ensuring only authorized devices can use specific switch ports. The other options address different network tasks and are not directly relevant to the scenario.
- A. Correct.
Port Security is used to restrict access to switch ports by limiting the number of MAC addresses allowed or by locking the port to a specific MAC address. This is a key technique to prevent unauthorized devices from connecting.
- B. Incorrect.
Spanning Tree Protocol (STP) is used to prevent network loops in Layer 2 networks, not to prevent unauthorized device access.
- C. Incorrect.
DHCP Snooping is primarily used to protect against rogue DHCP servers and unauthorized IP address assignments, not to block unauthorized device access via switch ports.
- D. Incorrect.
Network Address Translation (NAT) is used to modify IP address information in packets, typically to enable private IP address usage on a public network. It does not prevent unauthorized devices from connecting to a LAN.