Switchport security configuration that disallows automatic trunking is an effective method to prevent VLAN hopping. By setting the switchport mode to 'access', it restricts the port to belong to a single VLAN and does not negotiate trunking. This control measure ensures that an attacker cannot exploit the automatic trunk configuration to perform VLAN hopping. Other options do not directly prevent VLAN hopping; port security and MAC filtering secure access at different layers but do not specifically restrict trunk formation which is how VLAN hopping is typically exploited.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is VLAN hopping and how does it happen?
Open an interactive chat with Bash
What are switchport security and how do they work?
Open an interactive chat with Bash
What are ACLs, and how do they relate to VLAN security?