A city public-works user VLAN shows lateral SMB scanning between endpoints that share the same L2 segment. Which control filters that east-west traffic inside the VLAN?
Select an answer to reveal the explanation.
Short Explanation
An SVI ACL only sees traffic that leaves the VLAN for the router. Intra-VLAN SMB chatter never goes upstairs—so you need a VACL (or similar L2 filter) that works on the floor where the scans live.
Full Explanation
VACLs filter traffic within a VLAN, addressing east-west flows that never hit an SVI router ACL. Port ACLs are interface-scoped; VACLs apply VLAN-wide policies useful against lateral scanning. CoPP protects the control plane, and uRPF without proper topology/bindings is not the tool for intra-VLAN SMB filtering.