Which protocol should be disabled on network switches to prevent VLAN hopping attacks?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because DTP allows switches to automatically negotiate trunking, which attackers can exploit to send double-tagged frames and hop into other VLANs. A is wrong because STP prevents loops; disabling it causes broadcast storms but does not prevent VLAN hopping.
Full explanation below image
Full Explanation
B is correct because DTP allows switches to automatically negotiate trunking, which attackers can exploit to send double-tagged frames and hop into other VLANs. A is wrong because STP prevents loops; disabling it causes broadcast storms but does not prevent VLAN hopping. C is wrong because LACP handles link aggregation and is unrelated to VLAN hopping. D is wrong because CDP is a discovery protocol; while it should be disabled on user-facing ports for security, it is not the direct VLAN hopping vector.