Exam N10-008 topic 1 question 186 discussion

ACL are on routers or multi-layer Switch, on comptia exams if they say "switch" there talking about layer 2 only and you can't add ACL on a Layer 2 switch.

The question is not about what is (or is not) the best option. The "compTIA question" is what is the manager "MOST likely doing". Again, it is "compTIA question" in "compTIA reality" and the answer is "Disabling unneeded switchports". That is the basic. Do not overthink it with scenarios "attacker can unplug blablabla" - that is not the issue. This is basic exam, from basic knowledge that you as a future network specialist have to know - unneeded ports have to be turned off. Period. PS: Updated chatGPT4 & bing both say it is.... (suprise!) A. Disabling unneeded switchports.

There are MAC ACls like those involved in MAC filtering. An ACL is an Access Control List that would tell the switch that only authorised devices are allowed to connect. This however may be more time consuming than just disabling unused switchports but an ACL would be a certain way as someone could remove a device from plug in to that port.

C. Configuring DHCP snooping Chatty GPT says to prevent unauthorized client computers from connecting to a secure wired network, the network manager is most likely configuring DHCP snooping. DHCP snooping is a security feature used on network switches to mitigate various types of attacks, such as rogue DHCP servers or unauthorized devices trying to obtain IP addresses from the network.

Microsoft Bing AI selects (A): "The network manager is most likely performing the following action: Disabling unneeded switchports. This is a simple method that many administrators use to help secure the network from unauthorized access. By disabling all unused ports on a switch, it can prevent unauthorized client computers from connecting to a secure wired network. Option B (Changing the default VLAN) is incorrect because changing the default VLAN does not prevent unauthorized client computers from connecting to a secure wired network. Option C (Configuring DHCP snooping) is incorrect because DHCP snooping is used to prevent rogue DHCP servers from being introduced into a network. Option D (Writing ACLs to prevent access to the switch) is incorrect because ACLs are used to control traffic flow through networks and not to prevent unauthorized client computers from connecting to a secure wired network."

The question says "Computer Clients", meaning such computers have already connected to the switch and accessing other resources and that "Secured Wired Connection" is off-limits resource!

letter A

Correct answer is B. Default VLAN is being changed. Such a situation happens when Guests (or clients) need to have Internet access. But they shouldn't have access to secure internal resources. The Switch lets unrecognised MAC addresses have Internet access only.

The network manager is most likely performing the task of implementing port security on the switches in the Intermediate Distribution Frames (IDFs). Port security is a feature commonly used in network switches to control access to the network by limiting the devices that can connect to individual switch ports. By configuring port security, the network manager can enforce restrictions on the MAC (Media Access Control) addresses allowed to connect to specific switch ports. This prevents unauthorized client computers or devices from gaining access to the secure wired network. Typically, the network manager would configure port security to allow only authorized MAC addresses to connect to each switch port. If an unauthorized device attempts to connect, the switch can take actions such as shutting down the port, generating an alert, or applying other security measures to protect the network.

The answer is A via Chat GPT: The network manager is most likely performing the task of disabling unneeded switchports to prevent unauthorized client computers from connecting to the secure wired network. Disabling unneeded switchports means shutting down or administratively disabling switchports that are not in use or not intended for client connections. By doing so, the network manager effectively prevents unauthorized devices from being able to physically connect to the network through those disabled switchports. This is a common practice to enhance network security and prevent unauthorized access. By disabling switchports that are not in use or not authorized for client connections, the network manager reduces the attack surface and limits the potential entry points for unauthorized devices.

A. Most likely answer. A network manager doesn't need to go to an IDF just to secure unauthorized access. Mgr could do that from anywhere in the network. Net mgr is possibly unplugging/disabling unnecessary/unused ports. D. Second answer if, net mgr was in an MDF connected to the core switches/L3 switches/routers and applying ACL to the whole network. I choose A just because it seems like the mgr is just configuring/disabling ports only on the switch in the IDF

ACLs are not used for port security in this case. 802.1X should have been a good option. Disabling unused ports is also a way, but then not foolproof. This is not an exam written by experienced people, so choose dumbly

A is the correct one since is talking about WIRED . also you can check it on Chatgpt

A network manager is MOST likely performing the following action to ensure unauthorized client computers are not connecting to a secure wired network: Disabling unneeded switchports. By disabling unneeded switchports, the network manager can prevent unauthorized access to the secure wired network by controlling which device can connect to which switchport. Another common security measure that the network manager could be performing is Configuring DHCP snooping. DHCP snooping is used to prevent unauthorized DHCP servers from handing out IP addresses to clients on the network. This helps to prevent rogue devices from connecting to the network and potentially compromising the security of the network.

Dhcp snooping

Disabling unneeded switchports, doesn't directly prevent unauthorized clients from connecting to the secure wired network. Hence enabling DHCP snooping is a better solution.

chatGPT says it's DHCP Snooping.