Which of the following is the best practice when securing a switch from physical access?

A.
Disable unnecessary accounts

B.
Print baseline configuration

C.
Enable access lists

D.
Disable unused ports

Explanation:
Disabling unused switch ports is a simple method many network administrators use to help secure their
network from unauthorized access.
All ports not in use should be disabled. Otherwise, they present an open door for an attacker to enter.
Incorrect Answers:
A: Disabling unnecessary accounts would only block those specific accounts.
B: A security baseline is a standardized minimal level of security that all systems in an organization must
comply with. Printing it would not secure the switch from physical access.
C: The purpose of an access list is to identify specifically who can enter a facility.

http://orbit-computer-solutions.com/How-To-Configure-Switch-Security.php
Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis, 2014,
p. 60
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, p. 207