A company is experiencing network issues due to unauthorized servers assigning incorrect IP addresses to clients. Which Layer 2 security feature should the network administrator configure on the switches to prevent this problem?
Configuring DHCP snooping on the switches is the correct solution. DHCP snooping monitors DHCP traffic and filters out responses from unauthorized DHCP servers, preventing them from assigning IP addresses to clients. Dynamic ARP Inspection protects against ARP spoofing attacks, and port security limits the number of MAC addresses on a port; neither addresses the issue of rogue IP address assignment. Segmenting the network using VLANs does not prevent unauthorized IP assignments within the same VLAN.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is DHCP Snooping and how does it work?
Open an interactive chat with Bash
What role does the DHCP binding table play in DHCP Snooping?
Open an interactive chat with Bash
What is the difference between DHCP Snooping and Dynamic ARP Inspection (DAI)?
Open an interactive chat with Bash
Cisco CCNA 200-301
Security Fundamentals
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .