An organization has recently recovered from an incident where a managed switch had been accessed and reconfigured without authorization by an insider. The incident response team is working on developing a lessons learned report with recommendations. Which of the following recommendations will BEST prevent the same attack from occurring in the future?
A.
Remove and replace the managed switch with an unmanaged one.
B.
Implement a separate logical network segment for management interfaces.
C.
Install and configure NAC services to allow only authorized devices to connect to the network.
D.
Analyze normal behavior on the network and configure the IDS to alert on deviations from normal.
Explanation: