by default each port in a cisco catalyst switch is assigned to vlan1 which two recommendations are key to avoid unauthorized management access?