Certified Ethical Hacker (CEH v11) — Question 107

Bob, a network administrator at BigUniversity, realized that some students are connecting their notebooks in the wired network to have Internet access. In the university campus, there are many Ethernet ports available for professors and authorized visitors but not for students.
He identified this when the IDS alerted for malware activities in the network.
What should Bob do to avoid this problem?

Answer options

• A. Disable unused ports in the switches
• B. Separate students in a different VLAN
• C. Use the 802.1x protocol
• D. Ask students to use the wireless network

Correct answer: C

Explanation

Implementing the 802.1x protocol is correct because it provides port-based network access control, ensuring that only authorized devices can connect to the network. Disabling unused ports (Option A) is a good practice but doesn't address the issue of unauthorized connections. Separating students in a different VLAN (Option B) may help but doesn't prevent them from accessing the network entirely. Asking students to use the wireless network (Option D) does not solve the core problem of unauthorized wired access.