ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 244 - 350-601 discussion

Report
Export

An engineer must implement a solution that prevents untrusted DHCP servers from compromising the network. The feature must be configured on a Cisco Nexus 7000 Series Switch and applied to VLAN 10. The legitimate DHCP servers are connected to interface Ethernet 2/4. Which configuration set must be used to meet these requirements?

A.

Option A

Answers
A.

Option A

B.

Option B

Answers
B.

Option B

C.

Option C

Answers
C.

Option C

D.

Option D

Answers
D.

Option D

Suggested answer: A

Explanation:

The DHCP snooping feature acts as a firewall between untrusted hosts and trusted DHCP servers. It validates DHCP messages received from untrusted sources and filters out invalid messages. To implement this on a Cisco Nexus 7000 Series Switch for VLAN 10, you would enable DHCP snooping for that VLAN and then configure the specific interface connected to the legitimate DHCP servers to be trusted. This ensures that DHCP responses from the legitimate servers are allowed, while responses from any other servers are blocked.

Cisco Nexus 7000 Series NX-OS Security Configuration Guide1

Configuring DHCP Snooping2

asked 10/10/2024
Jenny Maliwanag
48 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first