Exam 350-701 topic 1 question 656 discussion

Actual exam question from Cisco's 350-701

Question #: 656
Topic #: 1

A networking team must harden an organization's network from VLAN hopping attacks. The team disables Dynamic Trunking Protocol and puts any unused ports in an unused VLAN. A trunk port is used as a trunk link. What must the team configure next to harden the network against VLAN hopping attacks?

A. dedicated VLAN ID for all trunk ports
B. disable STP on the network devices
C. DHCP snooping on all the switches
D. enable port-based network access control

Show Suggested Answer

Suggested Answer: A 🗳️

by Premium_Pils at Sept. 9, 2024, 3:40 p.m.

Comments

Submit Cancel

aa4a63c

4 weeks, 1 day ago

Selected Answer: A

Change native vlan

upvoted 1 times

...

Premium_Pils

7 months, 2 weeks ago

The answers are badly worded. Most probably, it is about a unique vlan id for the native vlan (different from the default vlan 1) https://www.ciscopress.com/articles/article.asp?p=1681033&seqNum=3 https://learningnetwork.cisco.com/s/blogs/a0D3i000002SKPREA4/vlan1-and-vlan-hopping-attack https://learningnetwork.cisco.com/s/question/0D53i00000KssdaCAB/native-vlan-tagging Some chances are that they meant the native vlan tagging.

upvoted 3 times

luismg

7 months ago

Adding native in front of vlan in option A makes a lot of sense.

upvoted 1 times

...

Exam 350-701 All Questions

View all questions & answers for the 350-701 exam

Exam 350-701 topic 1 question 656 discussion

Comments

aa4a63c

Premium_Pils

luismg

SY0-701