Question 160
An access switch advertises too much information about its device identity on an untrusted publicly exposed Ethernet jack. The security team wants to stop sending Cisco Discovery Protocol advertisements on that port while keeping CDP elsewhere. Which change is scoped correctly?
Explanation
Correct Answer
Cisco discovery advertisement can reveal device and port information to directly connected neighbors. Interface-scoped `no cdp enable` stops CDP on that one interface without globally disabling discovery on trusted infrastructure links. Verify operational behavior because security posture depends on other enabled discovery mechanisms too.
Incorrect Answers
SSH governs remote command access, not local CDP frame transmission. Removing SSH would make management harder without suppressing discovery advertisements.
This disables CDP throughout the device, not only on the exposed interface. It may satisfy suppression but unnecessarily removes useful discovery on trusted links.
Native VLAN handling affects Ethernet tagging, not whether the access port sends CDP neighbor frames. It is an unrelated broad disruption.