CompTIA CySA+ (CS0-002) — Question 407

A cybersecurity analyst is implementing a new network configuration on an existing network access layer to prevent possible physical attacks. Which of the following BEST describes a solution that would apply and cause fewer issues during the deployment phase?

Answer options

• A. Implement port security with one MAC address per network port of the switch.
• B. Deploy network address protection with DHCP and dynamic VLANs
• C. Configure 802.1X and EAPOL across the network.
• D. Implement software-defined networking and security groups for isolation.

Correct answer: A

Explanation

The correct answer is A, as implementing port security with one MAC address per network port is a straightforward solution that effectively limits access and reduces complications during deployment. Options B, C, and D involve more complex configurations that could introduce additional challenges or require more extensive changes to the existing network setup.