You must limit access to a printer with a persistent DHCP address of 2001:db8:0000:50::10/64 in VLAN v50 to users assigned to VLAN v50 only. Which action would satisfy this requirement?
A.
Implement persistent MAC learning to ensure that 2001:db8:0000:50::10 is allocated properly.
B.
Implement a firewall filter on the IRB interface for VLAN v50, blocking traffic to/from 2001:db8:0000:50::10.
C.
Implement a firewall filter on the VLAN v50, blocking traffic to/from 2001:db8:0000:50::10.
D.
Implement DHCP snooping on VLAN v50 to ensure that 2001:db8:0000:50::10 is allocated properly.
n computer networking, DHCP snooping is a series of techniques applied to improve the security of a DHCP infrastructure.[1]
DHCP servers allocate IP addresses to clients on a LAN. DHCP snooping can be configured on LAN switches to exclude rogue DHCP servers and remove malicious or malformed DHCP traffic. In addition, information on hosts which have successfully completed a DHCP transaction is accrued in a database of bindings which may then be used by other security or accounting features.
Other features may use DHCP snooping database information to ensure IP integrity on a Layer 2 switched domain. This information enables a network to:
Track the physical location of IP addresses when combined with AAA accounting or SNMP.
Ensure that hosts only use the IP addresses assigned to them when combined with source-guard a.k.a. source-lockdown[2]
Sanitize ARP requests when combined with arp-inspection a.k.a. arp-protect
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
sovietratta
1 year, 3 months agomohdema
2 years ago