Exam CNX-001 topic 1 question 16 discussion

Actual exam question from CompTIA's CNX-001

Question #: 16
Topic #: 1

A network engineer is installing new switches in the data center to replace existing infrastructure. The previous network hardware had administrative interfaces that were plugged into the existing network along with all other server hardware on the same subnet. Which of the following should the engineer do to better secure these administrative interfaces?

A. Connect the switch management ports to a separate physical network.
B. Disable unused physical ports on the switches to keep unauthorized users out.
C. Set the administrative interfaces and the network switch ports on the same VLAN.
D. Upgrade all of the switch firmware to the latest hardware levels.

Show Suggested Answer

Suggested Answer: A 🗳️

by SuntzuLegacy at May 19, 2025, 2:17 a.m.

Comments

Submit Cancel

SuntzuLegacy

1 month, 1 week ago

Selected Answer: A

Answer: A. Connect the switch management ports to a separate physical network. Separating management interfaces onto their own physical network (or, at a minimum, a dedicated management VLAN) is a best practice that prevents unauthorized or malicious traffic on the production network from reaching critical administrative interfaces.

upvoted 1 times

...