Examkin

Question

Difficulty: EasyLayer 2 Security Features (Port Security, DHCP Snooping, DAI)

Match each Layer 2 security feature on the left with its primary mitigation purpose or operation on the right.

  • Port SecurityLimits ingress traffic on an interface by restricting allowed source MAC addresses.
  • DHCP SnoopingFilters untrusted DHCP messages and builds the IP-to-MAC binding database.
  • Dynamic ARP Inspection (DAI)Intercepts and verifies ARP requests and replies against a binding database to prevent ARP poisoning.

Answer

Port Security matches limiting ingress traffic based on source MAC addresses. DHCP Snooping matches filtering untrusted DHCP messages and building the IP-to-MAC binding database. Dynamic ARP Inspection (DAI) matches intercepting and verifying ARP packets against a binding database to prevent ARP poisoning.
Each feature secures a distinct Layer 2 operation: Port Security controls MAC-level access, DHCP Snooping filters DHCP traffic while tracking legitimate IP-MAC assignments, and DAI utilizes those assignments to drop spoofed ARP frames.

Step-by-Step Solution

1
Identify the role of Port Security.
Port Security operates at the MAC layer to restrict ingress traffic based on authorized source MAC addresses.
It prevents unauthorized devices from attaching to a switch port.
2
Identify the role of DHCP Snooping.
DHCP Snooping blocks unauthorized DHCP servers and records valid IP-to-MAC address assignments in its binding database.
It ensures rogue DHCP servers cannot distribute invalid network configurations and provides binding context for other features.
3
Identify the role of Dynamic ARP Inspection (DAI).
DAI inspects ARP packets and uses the DHCP snooping binding database to validate ARP requests and responses.
It prevents man-in-the-middle attacks caused by malicious ARP poisoning or spoofing.

Key Concept

Layer 2 Security Features (Port Security, DHCP Snooping, DAI)
Rate this question

Topics

Layer 2 Security Features (Port Security, DHCP Snooping, DAI)

More questions from this topic