Are you planning to take the SY0-401 version or the SY0-501 version of the Security+ exam, you should have a basic understanding of secure network administration principles. This includes deploying switches securely.
See if you can answer this question.
Q. Your organization has several switches within the network. You need to implement a security control to prevent unauthorized access to these switches. Which of the following choices BEST meets this need?
A. Disable unused ports.
B. Implement an implicit deny rule.
C. Disable STP.
D. Enable SSH.
See if you're correct and view the full explanation here.