A fleet garage security review wants CDP disabled on public-facing kiosk ports while still allowing LLDP for IP phones on trusted desk ports. Which approach matches that intent?
Select an answer to reveal the explanation.
Short Explanation
Discovery protocols are name tags—great on trusted desks, risky on public kiosks. Peel CDP off the untrusted ports; keep LLDP where phones still need it. Selective disable beats a campus-wide blackout that breaks handsets.
Full Explanation
CDP and LLDP can be controlled per interface, so untrusted kiosk ports can disable CDP (and often LLDP) to reduce information leakage. On desk ports with IP phones, LLDP or CDP may still be required for voice VLAN and power discovery. UDLD does not replace LLDP voice TLVs. A global disable of all discovery can break phone onboarding, and enabling CDP only on kiosks is the opposite of the security goal.