Which two security measures must an engineer follow when implementing Layer 2 and Layer 3 network design? (Choose two.)

A. Utilize DHCP snooping on a per VLAN basis and apply ip dhcp snooping untrusted on all ports.

B. Utilize the native VLAN only on trunk ports to reduce the risk of a Double-Tagged 802.1q VLAN hopping attack.

C. Utilize an access list to prevent the use of ARP to modify entries to the table.

D. Utilize private VLANs and ensure that all ports are part of the isolated port group.

E. Utilize the ARP inspection feature to help prevent the misuse of gARP.






 

Suggested Answer: BE



This question is in 300-320 Designing Cisco Network Service Architectures (ARCH) Exam
For getting Cisco Certified Design Professional (CCDP) Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Cisco.
Trademarks, certification & product names are used for reference only and belong to Cisco.
The website does not contain actual questions and answers from Cisco's Certification Exam.