What must the OT admin do to prevent Layer 2-level communication between PLC-3 and CLIENT?

Refer to the exhibit.

PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT can send traffic to each other at the Layer 2 level.

What must the OT admin do to prevent Layer 2-level communication between PLC-3 and CLIENT?
A . Set a unique forward domain for each interface of the software switch.
B . Create a VLAN for each device and replace the current FGT-2 software switch members.
C . Enable explicit intra-switch policy to require firewall policies on FGT-2.
D . Implement policy routes on FGT-2 to control traffic between devices.

View Answer

Answer: A B