ITE205 Chap 11

Which command would be best to use on an unused switch port if a company adheres to the best practices as recommended by Cisco?

• ip dhcp snooping

• switchport port-security

• shutdown

• switchport port-security violation shutdown

What is the best way to prevent a VLAN hopping attack?

• Use VLAN 1 as the native VLAN on trunk ports

• Disable trunk negotiation for trunk ports and statically set nontrunk ports as access ports

• Disable STP on all nontrunk ports

• Use ISL encapsulation on all trunk links

Which procedure is recommended to mitigate the chances of ARP spoofing?

• Enable IP Source Guard on trusted ports.

• Enable DHCP snooping on selected VLANs.

• Enable port security globally.

• Enable DAI on the management VLAN.

A network administrator is configuring DHCP snooping on a switch. Which configuration command should be used first?

• ip dhcp snooping VLAN

• ip dhcp snooping

• ip dhcp snooping limit rate

• ip dhcp snooping trust

A network administrator is configuring DAI on a switch. Which command should be used on the uplink interface that connects to a router?

• ip arp inspection VLAN

• spanning-tree portfast

• ip arp inspection trust

• ip dhcp snooping