ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 153 - N10-009 discussion

Report
Export

A network administrator suspects users are being sent to malware sites that are posing as legitimate sites. The network administrator investigates and discovers that user workstations are configured with incorrect DNS IP addresses. Which of the following should the network administrator implement to prevent this from happening again?

A.

Dynamic ARP inspection

Answers
A.

Dynamic ARP inspection

B.

Access control lists

Answers
B.

Access control lists

C.

DHCP snooping

Answers
C.

DHCP snooping

D.

Port security

Answers
D.

Port security

Suggested answer: C

Explanation:

DHCP snooping is a security feature on network switches that helps to prevent unauthorized (rogue) DHCP servers from assigning IP addresses to clients. By implementing DHCP snooping, the network administrator can restrict DHCP responses to authorized servers only, preventing unauthorized DHCP configurations, such as incorrect DNS IPs, from being assigned to clients. This helps prevent man-in-the-middle attacks where malicious actors misconfigure DNS to redirect users to fraudulent sites. (Reference: CompTIA Network+ Study Guide, Chapter on Network Security)

asked 06/11/2024
antoine sala
35 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first