Which two Cisco solutions help prevent DHCP starvation attacks? (Choose two.)

IT Questions BankCategory: CCNA SecurityWhich two Cisco solutions help prevent DHCP starvation attacks? (Choose two.)

Question:
Which two Cisco solutions help prevent DHCP starvation attacks? (Choose two.)

  • DHCP Snooping
  • IP Source Guard
  • Dynamic ARP Inspection
  • Port Security
  • Web Security Appliance

Explanation:

Cisco provides solutions to help mitigate Layer 2 attacks including these:

  • IP Source Guard (IPSG) - prevents MAC and IP address spoofing attacks
  • Dynamic ARP Inspection (DAI) - prevents ARP spoofing and ARP poisoning attacks
  • DHCP Snooping - prevents DHCP starvation and SHCP spoofing attacks
  • Port Security - prevents many types of attacks including MAC table overflow attacks and DHCP starvation attacks

Web Security Appliance (WSA) is a mitigation technology for web-based threats.

Exam with this question: Modules 10 – 13: L2 Security and WLANs Exam Answers
Exam with this question: Module 14: Quiz – Layer 2 Security Considerations Network Security

Subscribe
Notify of
guest

0 Comments
Inline Feedbacks
View all comments