What is the BEST method to secure network switches against unauthorized inter-segment traffic manipulation?
Apply the switchport nonegotiate command to all trunk ports to prevent DTP frames from automatically forming a trunk.
Enable dynamic VLAN assignments via a VLAN Membership Policy Server across all switch interfaces.
Set all inactive ports to a non-routable VLAN to avoid unauthorized use.
Configure all user-access ports to non-trunking mode with the specific VLAN assigned via the switchport access command.