Huawei switches’ unauthorized access prevention function can prevent users from connecting unauthorized hubs and sharing network access through unauthorized Wi-Fi hotspots. An unauthorized hub allows multiple terminals to enter the network through a port intended for a single managed endpoint. This can bypass normal terminal-count limitations, admission controls, and access-policy enforcement.

Unauthorized Wi-Fi hotspot sharing occurs when a user connects an authenticated endpoint to the enterprise network and then enables hotspot or connection-sharing functionality. Other terminals can subsequently access the network through that endpoint without completing the required authentication process. Huawei switches can analyze terminal behavior, MAC-address relationships, packet characteristics, and access patterns to identify and restrict this behavior.

A USB flash drive is a local storage device and does not provide Ethernet network access, so option A is unrelated to switch-based unauthorized network access prevention. An unauthorized router is normally controlled through device identification, NAC, port security, or explicit access policies rather than the specific hub and hotspot-sharing prevention function described by this question.

Huawei intelligent terminal management combines terminal identification, authorization, traffic analysis, and bogus-terminal detection to achieve visualized access and prevent unauthorized connectivity.

==================