CiscoCertified Network Associate (CCNA)
Domain 5Objective 7
5.7 Configure and Verify Layer 2 Security Features (DHCP Snooping, Dynamic ARP Inspection, and Port Security) 200-301 Practice Questions (Page 2)
Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)
21questions here
5free pages
7concepts
15%of the exam
Questions 6–10
- 6
How does DHCP snooping help mitigate DHCP spoofing attacks?
Select an answer first - 7
Which command is used to verify that Dynamic ARP Inspection is active on VLAN 10?
Select an answer first - 8
In Dynamic ARP Inspection (DAI), which type of port is considered untrusted by default?
Select an answer first - 9
A network administrator has configured DHCP snooping on a switch. To verify that DHCP snooping is functioning correctly, the administrator needs to confirm that the switch is building the binding table and that the trust settings are correct. Which two commands should be used?
Select an answer first - 10
A network administrator has enabled DHCP snooping on a switch for VLAN 20. After a few hours, users report that some devices are not receiving IP addresses. The administrator checks the DHCP snooping binding table and notices that some legitimate clients are missing entries. Which action is most likely to resolve the issue?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.