Implementing VLAN for Unused Switchports

A network manager is concerned about visitors taking advantage of open cubicies at a company's facilities.

Which of the following would mitigate this issue?

A.

Create a VLAN for all unused switchports.

B.

Implement a DMZ for all external services.

C.

Implement root guard on all switches.

D.

Create a honeypot to attract attackers.

A.

The best option to mitigate the issue of visitors taking advantage of open cubicles at a company's facilities would be to create a VLAN for all unused switchports, which is option A.

Explanation:

A VLAN (Virtual Local Area Network) is a logical grouping of devices that can communicate with each other as if they were on the same physical network. By creating a VLAN for all unused switchports, any visitors who try to connect to the network through an open cubicle will be isolated from the rest of the network, preventing them from accessing sensitive data or compromising the network's security.

Option B, implementing a DMZ (Demilitarized Zone) for all external services, is not relevant to this scenario as it is typically used to segregate public-facing services from internal resources.

Option C, implementing root guard on all switches, is a security feature that prevents unauthorized switches from being added to the network. While it can be a useful security measure, it does not directly address the issue of visitors taking advantage of open cubicles.

Option D, creating a honeypot to attract attackers, is a security technique used to identify and study attackers. While it can be useful in certain contexts, it does not directly address the issue of visitors taking advantage of open cubicles.

Therefore, option A, creating a VLAN for all unused switchports, is the best option to mitigate the issue of visitors taking advantage of open cubicles at a company's facilities.