On the city’s core switches, management SSH and SNMP share the same VLANs and paths used by ordinary user data, with no ACL restricting who can reach the management plane. Which change best improves transport architecture security?
Select an answer to reveal the explanation.
Short Explanation
If anyone on the user network can knock on the switch’s admin door, you’ve mixed the control room with the lobby. Put management on its own path with locks, and keep day-to-day data traffic away from those interfaces.
Full Explanation
Separating management (and often control) planes from the general data plane reduces the chance that compromised user endpoints can administer infrastructure. Dedicated management networks or VRFs with ACLs, secure protocols, and limited source ranges are standard secure transport architecture practices. Collapsing user and management reachability increases blast radius after endpoint compromise.