A network engineer is trying to prevent users from connecting unauthorized equipment to a production network. Which option can be campus-wide to satisfy this requirement?
A. IP Source Guard
B. switch port block
C. Uplink fast
D. private VLAs
E. BPDU Guard
IP Source Guard is a security feature that restricts IP traffic on untrusted Layer 2 ports by filtering traffic based on the DHCP snooping binding database or manually configured IP source bindings. This feature helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host.
The BPDU guard feature can be globally enabled on the switch or can be enabled per port, but the feature operates with some differences. At the global level, you enable BPDU guard on Port Fast-enabled ports by using the spanning-tree portfast bpduguard default global configuration command.
BPDU Guard monitoring and protection the access ports to avoid unauthorized switch connection..
I think “E” is the correct answer.
There have to be two answers
IP Source Guard and ACL
should be BPDU guard. ip source guard is to be used with dhcp snooping