Network SecurityQuestion 72 of 100
Which feature validates DHCP messages and blocks rogue DHCP servers on untrusted switch ports?
a.Port mirroring
b.DHCP snooping
c.Link aggregation
d.MAC filtering
Explanation
DHCP snooping designates trusted and untrusted ports, dropping DHCP server responses on untrusted ports to block rogue DHCP servers. It also builds a binding table used by Dynamic ARP Inspection. This protects clients from receiving malicious configuration.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Which principle dictates that users and processes should receive only the minimum access necessary to perform their tasks?
- Which device inspects traffic and can actively block malicious activity inline, rather than only alerting on it?
- Which switch feature limits the number of MAC addresses learned on a port and can shut the port down if violated?
- Which authentication factor category does a hardware token or smartphone authenticator app represent?
- Which social engineering attack uses fraudulent emails that appear legitimate to trick users into revealing credentials?
- Which security model assumes no implicit trust and verifies every request regardless of network location?
Last reviewed: · editorial process
PrepPass Editorial Team · Verified against CompTIA Network+ (N10-009) · How we review