Free CompTIA Network+ N10-009 Practice Question

Configuring all user-access ports to fixed configurations via the switchport access vlan command effectively secures network switches against unauthorized inter-segment traffic manipulation, such as VLAN hopping. This technique reduces the chance of exploitation by forcing each port to carry traffic for a specified VLAN only, not allowing dynamic changes that could permit unauthorized access. In contrast, using the switchport nonegotiate command or dynamic VLAN assignments does not specifically aim at preventing this manipulation and thus is less effective in securing the switches adequately. Setting unused ports to a blackhole VLAN is a good security practice but does not directly prevent unauthorized inter-segment traffic manipulation.