(4) CCNP Infastructure Security DHCP Snooping/IPSG/DAI

4-ccnp-infastructure-security-dhcp-snooping-ipsg-dai

Exit

Question 1 of 1

Time Left

516451

block

A Cisco Catalyst switch that is prone to reboots continues to rebuild the DHCP snooping database. What is the solution to avoid the snooping database from being rebuilt after every device reboot?

Select the correct answer(s).

(0/0)

516452

none

A server with statically assigned IP address is attached to a switch that is provisioned for DHCP snooping. For more protection against malicious attacks, the network team is considering enabling dynamic ARP inspection alongside DHCP snooping. Which solution ensures that the server maintains network reachability in the future?

Select the correct answer(s).

(0/0)

516453

none

DHCP snooping and IP Source Guard have been configured on a switch that connects to several client workstations. The IP address of one of the workstations does not match any entries found in the DHCP binding database. Which statement describes the outcome of this scenario?

Select the correct answer(s).

(0/0)

516454

none

A DHCP configured router is connected directly to a switch that has been provisioned with DHCP snooping. IP Source Guard with the ip verify source port-security command is configured under the interfaces that connect to all DHCP clients on the switch. However, clients are not receiving an IP address via the DHCP server. Which option is the cause of this issue?

Select the correct answer(s).

(0/0)

516458

none

A switch is added into the production network to increase port capacity. A network engineer is configuring the switch for DHCP snooping and IP Source Guard, but is unable to configure ip verify source under serveral of the interfaces. Which option is the cause of the problem?

Select the correct answer(s).

(0/0)

516459

none

The network monitoring application alerts a network engineer of a client PC that is acting as a rogue DHCP server. Which two commands help trace this PC when the MAC address is known? (Choose two.)

Select the correct answer(s).

(0/0)

516460

none

Which type of information does the DHCP snooping binding database contain?

Select the correct answer(s).

(0/0)

516461

none

Which switch feature determines validity based on IP-to-MAC address bindings that are stored in a trusted database?

Select the correct answer(s).

(0/0)

516462

none

Which command is needed to enable DHCP snooping if a switchport is connected to a DHCP server?

Select the correct answer(s).

(0/0)

516463

none

Which database is used to determine the validity of an ARP packet based on a valid IP-to-MAC address binding?

Select the correct answer(s).

(0/0)

516464

none

When IP Source Guard with source IP filtering is enabled on an interface, which feature must be enabled on the access VLAN for that interface?

Select the correct answer(s).

(0/0)

516465

none

Which statement about the MAC address sticky entries in the switch when the copy run start command is entered is true?

Select the correct answer(s).

(0/0)

516466

none

On which layer does IP source guard provide filtering to prevent a malicious host from impersonating the IP address of a legitimate host?

Select the correct answer(s).

(0/0)

516467

none

(4) CCNP Infastructure Security DHCP Snooping/IPSG/DAI

Question 1 of 1

Time Left

A Cisco Catalyst switch that is prone to reboots continues to rebuild the DHCP snooping database. What is the solution to avoid the snooping database from being rebuilt after every device reboot?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

DHCP snooping and IP Source Guard have been configured on a switch that connects to several client workstations. The IP address of one of the workstations does not match any entries found in the DHCP binding database. Which statement describes the outcome of this scenario?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

A switch is added into the production network to increase port capacity. A network engineer is configuring the switch for DHCP snooping and IP Source Guard, but is unable to configure ip verify source under serveral of the interfaces. Which option is the cause of the problem?

Select the correct answer(s).

(0/0)

The network monitoring application alerts a network engineer of a client PC that is acting as a rogue DHCP server. Which two commands help trace this PC when the MAC address is known? (Choose two.)

Select the correct answer(s).

(0/0)

Which type of information does the DHCP snooping binding database contain?

Select the correct answer(s).

(0/0)

Which switch feature determines validity based on IP-to-MAC address bindings that are stored in a trusted database?

Select the correct answer(s).

(0/0)

Which command is needed to enable DHCP snooping if a switchport is connected to a DHCP server?

Select the correct answer(s).

(0/0)

Which database is used to determine the validity of an ARP packet based on a valid IP-to-MAC address binding?

Select the correct answer(s).

(0/0)

When IP Source Guard with source IP filtering is enabled on an interface, which feature must be enabled on the access VLAN for that interface?

Select the correct answer(s).

(0/0)

Which statement about the MAC address sticky entries in the switch when the copy run start command is entered is true?

Select the correct answer(s).

(0/0)

On which layer does IP source guard provide filtering to prevent a malicious host from impersonating the IP address of a legitimate host?

Select the correct answer(s).

(0/0)

Which option is the minimum number of bindings that the DHCP snooping database can store?

Select the correct answer(s).

(0/0)

Results

Correct

0

Incorrect

0

Skipped

0

Overall Percentage

0%

Rate Quiz