Which protocol should be disabled on network switches to prevent VLAN hopping attacks?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — disable DTP because it lets switches auto-negotiate trunking, and attackers can use that to send double-tagged frames and hop into other VLANs. You don't stop VLAN hopping by disabling Spanning Tree Protocol; that just risks broadcast storms.
Full Explanation
The correct choice is the Dynamic Trunking Protocol option because DTP allows switches to automatically negotiate trunking, which attackers can exploit to send double-tagged frames and hop into other VLANs. The Spanning Tree Protocol option is wrong because STP prevents loops; disabling it causes broadcast storms but does not prevent VLAN hopping. The Link Aggregation Control Protocol option is wrong because LACP handles link aggregation and is unrelated to VLAN hopping. The Cisco Discovery Protocol option is wrong because CDP is a discovery protocol; while it should be disabled on user-facing ports for security, it is not the direct VLAN hopping vector.