Dynamic Host Configuration Protocol (DHCP) JN0-683 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   You are configuring a Junos device as a DHCP server. You need to ensure that a specific server (with MAC address 00:11:22:33:44:55) always receives the same IP address (192.0.2.100) from the pool. Other clients in the pool should receive dynamic addresses from the range. What is the correct way to configure this?

   • AConfigure the client's interface on the switch with a 'dhcp-client' statement to request a specific address.
   • BUse a firewall filter to match the MAC address and rewrite the DHCPACK with the desired IP.
   • CCreate a static binding within the pool for MAC address 00:11:22:33:44:55 and IP address 192.0.2.100.
   • DExclude 192.0.2.100 from the dynamic range and rely on the client to request it via a DHCPREQUEST.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   You have enabled DHCP snooping on a Junos switch in a data center. Authorized clients on VLAN 100 are able to obtain IP addresses, but you notice that the DHCP snooping binding table is not being populated. You need to ensure the binding table is populated for use with IP Source Guard. What is the most likely reason the table is empty?

   • AThe DHCP snooping feature is only enabled globally, not on the specific VLAN (VLAN 100).
   • BThe clients are sending DHCPDISCOVER messages with the broadcast flag set.
   • CThe clients are using DHCPv6 instead of DHCPv4.
   • DThe DHCP server is connected to a port that is not configured as 'trusted' for DHCP snooping.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of DHCP snooping?

   • ATo filter DHCP messages and prevent unauthorized DHCP servers from assigning addresses
   • BTo encrypt DHCP messages between clients and servers
   • CTo compress DHCP messages to reduce network overhead
   • DTo translate DHCP messages between different IP versions
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A client on a subnet is not receiving a DHCP address. You have verified that the client is sending DHCPDISCOVER messages. The Junos switch is configured as a DHCP relay. Which log file or command would you check on the Junos device to see if the relay is forwarding the DISCOVER to the server?

   • ARun 'show dhcp server binding' to see if the client has a binding.
   • BRun 'show dhcp relay statistics' to see the count of packets received and forwarded.
   • CCheck the 'dhcp_relay' log file using 'show log dhcp_relay'.
   • DRun 'show interfaces irb.10' to check the interface status.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security audit reveals that unauthorized devices are connecting to access ports in a data center and obtaining IP addresses from the legitimate DHCP server. You need to prevent rogue devices from receiving an address while allowing authorized servers to continue using DHCP. What is the most effective configuration to implement?

   • AConfigure DHCP option 82 on all access ports to insert the switch's MAC address into all client requests.
   • BEnable DHCP snooping globally and on the relevant VLANs, and configure the ports connecting to authorized DHCP servers as trusted.
   • CDisable DHCP on all access ports and require static IP configuration for every server in the data center.
   • DUse a firewall filter on the access ports to permit only DHCP DISCOVER messages from known MAC addresses.
   Reveal Solution Discussion Select an answer first