An administrator implements LLDP-MED on an EX Series switch network. To prevent unauthorized devices from masquerading as IP phones and requesting voice VLAN access, which feature should be combined with LLDP-MED?
IEEE 802.1X port-based authentication with dynamic VLAN assignment verifies device identity against a RADIUS server before granting network access, then assigns the voice VLAN only after successful authentication. This prevents rogue devices from spoofing LLDP-MED TLVs to obtain voice VLAN membership, satisfying the requirement to block unauthorised masquerading as IP phones.