Two devices that are connected to the same switch need to be totally isolated from one another. Which Cisco switch security feature will provide this isolation?
- PVLAN Edge
- DTP
- SPAN
- BPDU guard
Explanation: The PVLAN Edge feature does not allow one device to see traffic that is generated by another device. Ports configured with the PVLAN Edge feature are also known as protected ports. BPDU guard prevents unauthorized connectivity to a wired Layer 2 switch. SPAN is port mirroring to capture data from one port or VLAN and send that data to another port. DTP (Dynamic Trunking Protocol) is automatically enabled on some switch models to create a trunk if the attached device is configured for trunking. Cisco recommends disabling DTP as a best practice.
Related exam: CCNA Security Chapter 6 Exam Answers
Related exam: Modules 13 - 14: Layer 2 and Endpoint Security Group Exam Answers
Related exam: CCNA Security Final Exam (CCNAS v1.2)
