200-301: Cisco Certified Network AssociateDemo

By Cisco · Question Mode

QuestionQ710

Security Fundamentals

Which practice helps protect a network against VLAN hopping attacks?

  • A Enable dynamic ARP inspection
  • B Configure an ACL to prevent traffic from changing VLANs
  • C Change native VLAN to an unused VLAN ID
  • D Implement port security on internet-facing VLANs
Explanation

A common defense against VLAN hopping is to move the native VLAN to an unused VLAN ID so attacker-crafted tagged traffic cannot exploit the default native VLAN through double-tagging. This mitigation addresses the Layer 2 trunking behavior that VLAN hopping attacks target, whereas the other options address different threats or do not directly prevent VLAN hopping.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!