What is a recommended best practice when dealing with the native VLAN?
- Use port security.
- Turn off DTP.
- Assign it to an unused VLAN.
- Assign the same VLAN number as the management VLAN.
Explanation: Port security cannot be enabled on a trunk and trunks are the only types of ports that have a native VLAN. Even though turning DTP off on a trunk is a best practice, it does not have anything to do with native VLAN risks. To prevent security breaches that take advantage of the native VLAN, place the native VLAN in an unused VLAN other than VLAN 1. The management VLAN should also be an unused VLAN that is different from the native VLAN and something other than VLAN 1.
Exam with this question: 11.6.4 Module Quiz - Switch Security Configuration Answers
Please login or Register to submit your answer