One of the best practices for network hardening is to disable unneeded switchports. This prevents unauthorized devices from connecting to the network and reduces the attack surface. Disabling unneeded ports also conserves power and bandwidth. To disable a port on a Cisco switch, the administrator can use the following commands:
switch# configure terminalswitch(config)# interface fastethernet 0/1switch(config-if)# shutdownswitch(config-if)# end Disabling SSH service is not a good idea, as SSH provides secure remote access to the switch. Disabling MAC filtering or port security would weaken the security of the switch, as it would allow any device to connect to any port. MAC filtering and port security are techniques that limit the number of MAC addresses or devices that can access a port. References: Chapter 18. Network Hardening Techniques - CompTIA Network+ N10-008 Cert Guide, CompTIA Network+ Exam N10-008 - Lesson 19: Applying Network Hardening Techniques, CompTIA Network+ N10-008 | Udemy