Port Security Including MAC Limiting, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard JN0-352 Practice Questions (Page 4)

Questions 16–19

1. 16application · medium

   A network administrator is configuring a Junos switch to prevent ARP spoofing. DHCP snooping is enabled and the binding database is populated. The administrator wants to validate ARP packets on access ports. What should the administrator configure?

   • AConfigure a static ARP entry for each device.
   • BEnable IP source guard on the access interfaces.
   • CEnable Dynamic ARP Inspection (DAI) on the access interfaces.
   • DApply a firewall filter to block ARP requests.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A Junos switch has DHCP snooping enabled and the binding database is populated. The administrator wants to prevent IP spoofing on access ports by filtering IP traffic based on the binding database. What should the administrator configure?

   • AEnable Dynamic ARP Inspection (DAI) on the access interfaces.
   • BApply a firewall filter that permits only DHCP traffic.
   • CEnable IP source guard on the access interfaces.
   • DConfigure MAC limiting on the access interfaces.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What information is stored in the DHCP snooping binding database on a Junos switch?

   • AIP address, MAC address, VLAN, and interface for each DHCP client
   • BOnly the IP addresses of all DHCP servers on the network
   • CThe ARP cache entries for all devices in the VLAN
   • DThe list of all MAC addresses learned on each interface
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A Junos switch is configured with DHCP snooping. The administrator wants to enable Dynamic ARP Inspection (DAI) to prevent ARP spoofing. However, the switch has a mix of DHCP clients and devices with static IP addresses. What should the administrator do to ensure DAI works for all devices?

   • AEnable DAI and add static bindings for devices with static IP addresses.
   • BEnable DAI and disable DHCP snooping for static IP devices.
   • CEnable DAI and rely on the ARP cache for static IP devices.
   • DEnable DAI and configure the static IP devices as trusted ports.
   Reveal Solution Discussion Select an answer first