A network administrator is troubleshooting ARP spoofing on a Junos switch. DHCP snooping is enabled and the binding database is populated. The administrator wants to validate ARP packets on access ports. What must be configured to ensure DAI works correctly?

Configure a static ARP entry for each legitimate device.

Disable DHCP snooping and rely on the ARP cache.

Enable DAI only on the uplink interface connected to the router.

Enable DAI globally and apply it to all access interfaces.

Which Junos configuration statement is used to limit the number of MAC addresses that can be learned on a switch interface?

set vlans default mac-limit interface ge-0/0/1 limit 5

set interfaces ge-0/0/1 mac-limit 5

set interfaces ge-0/0/1 ethernet-switching mac-limit 5

set ethernet-switching-options mac-limit interface ge-0/0/1 limit 5

A Junos switch has DHCP snooping enabled. The administrator wants to ensure that ARP packets from clients are validated against the DHCP snooping binding database. What should the administrator configure?

Enable Dynamic ARP Inspection (DAI) on the access interfaces.

Enable IP source guard on the access interfaces.

Configure a static ARP entry for each client.

Apply a firewall filter to block ARP replies.

What is the primary purpose of configuring MAC limiting on a Junos switch interface?

To prevent MAC flooding attacks by limiting the number of MAC addresses learned on an interface

To validate ARP packets against the DHCP snooping database

To filter IP traffic based on the DHCP snooping binding database

To prevent unauthorized devices from connecting to the network

What is the primary function of Dynamic ARP Inspection (DAI) on a Junos switch?

To prevent MAC flooding attacks by limiting MAC addresses

To encrypt ARP traffic between switches and hosts

To validate ARP packets against the DHCP snooping binding database to prevent ARP spoofing

To filter IP traffic based on the DHCP snooping binding database

Juniper NetworksCertified Specialist, Enterprise Routing and Switching (JNCIS-ENT)

Domain 3Objective 2

Port Security Including MAC Limiting, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard JN0-352 Practice Questions (Page 3)

Part of the Layer 2 Security domain, which makes up ~13% of our current practice bank. Juniper Networks does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

4concepts

Questions 11–15

11application · medium
A network administrator is troubleshooting ARP spoofing on a Junos switch. DHCP snooping is enabled and the binding database is populated. The administrator wants to validate ARP packets on access ports. What must be configured to ensure DAI works correctly?
Select an answer first
12foundation · easy
Which Junos configuration statement is used to limit the number of MAC addresses that can be learned on a switch interface?
Select an answer first
13application · medium
A Junos switch has DHCP snooping enabled. The administrator wants to ensure that ARP packets from clients are validated against the DHCP snooping binding database. What should the administrator configure?
Select an answer first
14foundation · easy
What is the primary purpose of configuring MAC limiting on a Junos switch interface?
Select an answer first
15foundation · easy
What is the primary function of Dynamic ARP Inspection (DAI) on a Junos switch?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to JN0-352

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Juniper Networks. “JN0-352” is a trademark of its owner, used for identification only.