Which two Cisco solutions help prevent DHCP starvation attacks? (Choose two.)

Question:
Which two Cisco solutions help prevent DHCP starvation attacks? (Choose two.)

• DHCP Snooping
• IP Source Guard
• Dynamic ARP Inspection
• Port Security
• Web Security Appliance

Explanation:

Cisco provides solutions to help mitigate Layer 2 attacks including these:

• IP Source Guard (IPSG) - prevents MAC and IP address spoofing attacks
• Dynamic ARP Inspection (DAI) - prevents ARP spoofing and ARP poisoning attacks
• DHCP Snooping - prevents DHCP starvation and SHCP spoofing attacks
• Port Security - prevents many types of attacks including MAC table overflow attacks and DHCP starvation attacks

Web Security Appliance (WSA) is a mitigation technology for web-based threats.

Exam with this question: Modules 10 – 13: L2 Security and WLANs Exam Answers
Exam with this question: Module 14: Quiz – Layer 2 Security Considerations Network Security