Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
What is the best method to prohibit unauthorized hosts from accessing the LAN?
Configure port-security on the LAN switch.
Disable autonegotiation on each LAN Switch port.
Setting a password for the VTY 0 4 ports on the LAN Switch.
Configuring a security login banner.
The main reason to use port security in a switch is to stop or prevent unauthorized users to access the LAN. The network engineer can use port security to restrict usage of a specific port, by defining a maximum number of MAC addresses, by statically defining an address, or by applying different violation actions over the interface. The question refers to the LAN, not to the Switch therefore by configuring password for the VTY 0 4 ports, the Switch will only prevent unauthorized access to the Telnet port. The security banner will only warn the intruder, it will not prohibit the access. Autonegotiation is needed for interface configuration; it will not prevent unauthorized users. For more information refer to: [Odom W. - Cisco CCENT - CCNA ICND1 100-101 Official Certification Guide, Chapter 8].
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.