CCNA: Cisco Certified Network Associate — Question 47

An engineer is asked to protect unused ports that are configured in the default VLAN on a switch. Which two steps will fulfill the request? (Choose two.)

Answer options

• A. Configure the ports as trunk ports.
• B. Enable the Cisco Discovery Protocol.
• C. Configure the port type as access and place in VLAN 99.
• D. Administratively shut down the ports.
• E. Configure the ports in an EtherChannel.

Correct answer: C, D

Explanation

The correct actions are to configure the port type as access and assign it to VLAN 99 (C), which isolates it from the default VLAN, and to administratively shut down the ports (D), preventing any unauthorized access. The other options do not provide adequate protection for unused ports; trunking (A) and EtherChannel (E) expose the ports, while enabling CDP (B) does not secure them.