The security team at a multinational cloud services company is working on their port security. They implemented basic Media Access Control $($MAC$)$ address filtering on all switch ports, but they have concerns about the risk of MAC spoofing and the management overhead of maintaining a list of valid MAC addresses. To address these concerns, they now require strong authentication before a user can obtain full network access. Which of the following measures should the team implement next?