Free CompTIA Network+ N10-009 Practice Question

Switchport security configuration that disallows automatic trunking is an effective method to prevent VLAN hopping. By setting the switchport mode to 'access', it restricts the port to belong to a single VLAN and does not negotiate trunking. This control measure ensures that an attacker cannot exploit the automatic trunk configuration to perform VLAN hopping. Other options do not directly prevent VLAN hopping; port security and MAC filtering secure access at different layers but do not specifically restrict trunk formation which is how VLAN hopping is typically exploited.