A network administrator is implementing Layer 2 security controls on Cisco Catalyst access switches. Match each Layer 2 security feature mechanism on the left to its corresponding operational behavior on the right.
- DHCP Snooping Option 82 InsertionAttaches relay agent information (circuit ID/remote ID) to DHCP requests on untrusted ports
- Dynamic ARP Inspection (DAI)Intercepts and checks ARP requests against the DHCP binding database on untrusted interfaces
- Port Security Sticky MAC LearningDynamically converts learned MAC addresses into running configuration entries
- Port Security Restrict Violation ModeDrops unauthorized frames, increments the violation counter, and sends a Syslog message without shutting down the interface
Cevap
DHCP Snooping Option 82 Insertion attaches relay agent information to DHCP requests on untrusted ports. Dynamic ARP Inspection (DAI) intercepts and checks ARP requests against the DHCP binding database on untrusted interfaces. Port Security Sticky MAC Learning dynamically converts learned MAC addresses into running configuration entries. Port Security Restrict Violation Mode drops unauthorized frames, increments the violation counter, and sends a Syslog message without shutting down the interface.
Each feature is paired with its precise Layer 2 operational behavior. DHCP Snooping Option 82 inserts circuit details into client requests. DAI mitigates ARP poisoning by cross-referencing ARP headers against the DHCP snooping database. Sticky MAC converts dynamic address learning into explicit running-configuration statements. Restrict mode drops offending frames and logs an alert while preserving link availability.
Adım Adım Çözüm
Anahtar Kavram
Layer 2 Security Mechanisms and Operational Characteristics