An organization has DHCP servers set up to allocate IP addresses to clients on the LAN. What must be done to ensure the LAN switches prevent malicious DHCP traffic while also distributing IP addresses to the correct endpoints?

A. Configure Dynamic ARP inspection and add entries in the DHCP snooping database.

B. Configure DHCP snooping and set trusted interfaces for all client connections.

C. Configure Dynamic ARP inspection and antispoofing ACLs in the DHCP snooping database.

D. Configure DHCP snooping and set a trusted interface for the DHCP server.








 

Suggested Answer: B

Reference:
https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/
 b_consolidated_config_guide_3850_chapter_0110101.html

This question is in 350-701 exam 
For getting CCNP Security Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Cisco.
Trademarks, certification & product names are used for reference only and belong to Cisco.