CompTIA A+ Core 2 (220-1002) — Question 281

A technician needs to secure a SOHO network against unauthorized access. A switch has been deployed, and all endpoints have been patched; however, not all of the endpoints are in use. A solution must be implemented to secure the unused endpoints. Which of the following should the technician do FIRST?

Answer options

• A. Implement firewall rules and restrictions.
• B. Disable the inactive ports.
• C. Implement a NAC solution.
• D. Enable MAC filtering.

Correct answer: B

Explanation

Disabling inactive ports is a direct way to prevent unauthorized access to unused endpoints, making option B the best initial step. While implementing firewall rules (option A) and NAC solutions (option C) can enhance security, they do not directly address the immediate risk posed by open ports. MAC filtering (option D) can also be beneficial but is less effective than simply disabling unused ports.