A. Implement port security with one MAC address per network port of the switch.
B. Deploy network address protection with DHCP and dynamic VLANs
C. Configure 802.1X and EAPOL across the network.
D. Implement software-defined networking and security groups for isolation.