A county facilities closet reveals a compromised rogue access point plugged into a live switch port on the municipal staff VLAN. Besides removing the device, which mitigation best contains the wired attachment risk?
Select an answer to reveal the explanation.
Short Explanation
Think of the rogue AP like a stranger’s garden hose spliced into the city’s water main—you do not only yank the hose; you close the valve. Shut or quarantine that switchport so the wired path cannot keep feeding the WLAN attack. Pulling the radio alone still leaves an open pipe.
Full Explanation
A rogue AP bridged onto a production switch extends Layer-2 attack surface into the wired campus. Mitigation for unrepaired or compromised WLAN devices includes removing the radio and quarantining its attachment point so the port cannot be reused immediately. Switchport quarantine aligns with Domain 2 guidance to contain compromised systems at both wireless and wired edges.