CompTIA Security+ SY0-701 Practice Question

Disabling unused ports is a primary method for enhancing the security of a network switch. It mitigates the risk of unauthorized access or network taps by reducing the number of active points where a malicious actor can connect to the network. VLAN configuration is crucial for segmenting network traffic and implementing access controls, but it is a practice for organizing and controlling network traffic rather than securing the switch itself. Changing the management VLAN to a non-default value helps minimize risk but is an added measure rather than a primary method. Enabling DHCP on the switch is generally not a security measure; in fact, it could introduce risks if not properly managed.