What protocol should be disabled to help mitigate VLAN attacks?
- CDP
- ARP
- STP
- DTP
Explanation: Dynamic Trunking Protocol (DTP) should be disabled to mitigate VLAN hopping attacks because a threat actor can spoof DTP signaling to trick a switch port into establishing an unauthorized trunk link. Once a trunk is established, the attacker can access all VLANs on the switch. Mitigation involves disabling DTP negotiations on both access ports (by setting them to static access mode) and trunk ports (using the switchport nonegotiate command) to ensure that trunking is only enabled manually.
Related exam: CCNA 2 v7 Course Final Exam Answers
Related exam: CCNA 4 - Connecting Networks (v5.0.3 + v6.0) Final Exam Answers
