What security practice is described for the switch console port to prevent unauthorized changes?

• A. Password protection on the console port
• B. Biometric protection on console
• C. IP-based ACL on console
• D. Console port password protection

Answer: (D)

The console port is a direct, local path to configuring the device, so securing it with a password ensures that anyone who connects a console cable must authenticate before making changes. This means configuring the console line with a password and enabling login, so the device prompts for a password before any commands can be entered (often alongside an enable password for privileged access). This approach directly prevents unauthorized configuration changes when someone has physical access to the switch.

Biometric protection on the console is impractical for typical networks, and an IP-based ACL protects network traffic rather than the local console connection. Therefore, console port password protection is the appropriate security practice.