Today’s SY0-701 CompTIA Security+ Pop Quiz: I don’t see this in the map app

Which of the following would be the best way to prevent all non-IT networks from accessing the switch configuration VLAN?