200-301: Cisco Certified Network AssociateDemo

A key defense against VLAN hopping is to ensure user access ports are not placed in the native VLAN. Double-tagging attacks rely on the native VLAN treatment of untagged traffic, so assigning access ports to VLANs other than the native VLAN reduces that attack path. This aligns with standard switch-hardening guidance for preventing VLAN hopping, along with disabling trunk negotiation and statically configuring access ports.