What is the primary purpose of DHCP snooping?

To encrypt DHCP traffic between clients and servers

To validate ARP packets and prevent ARP spoofing

To limit the number of MAC addresses on a switch port

To filter DHCP messages and prevent rogue DHCP servers from assigning malicious IP configurations

A company has a flat Layer 2 network with a single DHCP server connected to a distribution switch. Users report intermittent IP address conflicts and some machines receiving addresses from an unknown scope. The admin suspects a rogue DHCP server on an access port. The admin enables DHCP snooping globally and on the VLANs. Which additional configuration is required to make DHCP snooping effective?

Configure 'ip dhcp snooping limit rate' on the uplink to the distribution switch

Apply 'ip dhcp snooping information option' to insert option 82 on all ports

Enable 'ip dhcp snooping verify mac-address' on all access ports

Mark the port connected to the legitimate DHCP server as 'trusted' and leave all other ports as 'untrusted'

What is the primary purpose of storm control on a Cisco switch?

To limit the rate of broadcast, multicast, or unknown unicast traffic on a port

To filter ARP packets and prevent ARP spoofing

To prevent unauthorized devices from connecting to the network

In a DHCP snooping configuration, what happens to a DHCP OFFER message received on an untrusted port?

It is forwarded to the DHCP server

Which configuration practice helps prevent VLAN hopping attacks on a switch access port?

Configuring the port as a trunk with native VLAN 1

Enabling port security with a maximum MAC count of 1

Disabling DTP and setting the port to access mode

CiscoCertified Network Professional Security

Domain 2Objective 3

2.3 Configure Network Infrastructure Security Methods (network Segmentation Using VLANs or SGTs; Layer 2 and Port Security; DHCP Snooping; Dynamic ARP Inspection; Storm Control; and Defenses Against MAC, ARP, VLAN Hopping, STP, and DHCP Rogue Attacks) 350-701 Practice Questions (Page 1)

Part of the Network Security domain, which accounts for 25% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

12concepts

25%of the exam

Questions 1–5

1foundation · easy
What is the primary purpose of DHCP snooping?
Select an answer first
2application · medium
A company has a flat Layer 2 network with a single DHCP server connected to a distribution switch. Users report intermittent IP address conflicts and some machines receiving addresses from an unknown scope. The admin suspects a rogue DHCP server on an access port. The admin enables DHCP snooping globally and on the VLANs. Which additional configuration is required to make DHCP snooping effective?
Select an answer first
3foundation · easy
What is the primary purpose of storm control on a Cisco switch?
Select an answer first
4foundation · easy
In a DHCP snooping configuration, what happens to a DHCP OFFER message received on an untrusted port?
Select an answer first
5foundation · easy
Which configuration practice helps prevent VLAN hopping attacks on a switch access port?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.