A company is experiencing network issues due to unauthorized servers assigning incorrect IP addresses to clients. Which Layer 2 security feature should the network administrator configure on the switches to prevent this problem?
Configuring DHCP snooping on the switches is the correct solution. DHCP snooping monitors DHCP traffic and filters out responses from unauthorized DHCP servers, preventing them from assigning IP addresses to clients. Dynamic ARP Inspection protects against ARP spoofing attacks, and port security limits the number of MAC addresses on a port; neither addresses the issue of rogue IP address assignment. Segmenting the network using VLANs does not prevent unauthorized IP assignments within the same VLAN.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is DHCP snooping?
Open an interactive chat with Bash
How does dynamic ARP inspection work, and why isn't it suitable for this situation?
Open an interactive chat with Bash
What are VLANs, and how do they relate to security in a network?
Open an interactive chat with Bash
Cisco CCNA 200-301
Security Fundamentals
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access