What additional security measure must be enabled along with IP Source Guard to protect against address spoofing?

IT Exam Items RepositoryCategory: CCNA SecurityWhat additional security measure must be enabled along with IP Source Guard to protect against address spoofing?

What additional security measure must be enabled along with IP Source Guard to protect against address spoofing?

  • port security
  • BPDU Guard
  • root guard
  • DHCP snooping

Explanation: Like Dynamic ARP Inspection (DAI), IP Source Guard (IPSG) needs to determine the validity of MAC-address-to-IP-address bindings. To do this IPSG uses the bindings database built by DHCP snooping.

Related exam: CCNA Security Chapter 6 Exam Answers
Related exam: Module 14: Quiz – Layer 2 Security Considerations Network Security