Home
71.
What must be true for dynamic ARP inspection to operate successfully? (Choose two answers.)
  • A.
    DHCP snooping must be enabled globally
  • B.
    DHCP snooping must be enabled for specific VLANs
  • C.
    IP ARP inspection must be enabled for specific VLANs.
  • D.
    All interfaces, except for upstream interfaces, need to be configured as trusted interfaces.
  • Answer & Explanation
  • Report
Answer : [A and B]
Explanation :
Report
Name Email  
72.
How does IP Source Guard learn where valid source IPs are in the network?
  • A.
    ARP cache
  • B.
    MAC address table
  • C.
    DHCP snooping database
  • D.
    Routing table
  • Answer & Explanation
  • Report
Answer : [C]
Explanation :
Report
Name Email  
73.
Which command enables you to verify which interfaces have been configured with IP Source Guard?
  • A.
    show ip arp
  • B.
    show ip verify source
  • C.
    show interfaces status
  • D.
    show ip dhcp snooping binding
  • Answer & Explanation
  • Report
Answer : [B]
Explanation :
Report
Name Email  
74.
Which two of the following statements are true about PVLANs?
  • A.
    Community ports cannot communicate with other community ports in the same community.
  • B.
    Community ports can communicate with other community ports in a different community.
  • C.
    Community ports cannot communicate with isolated ports and vice versa.
  • D.
    Isolated ports cannot communicate with other isolated ports.
  • Answer & Explanation
  • Report
Answer : [C and D]
Explanation :
Report
Name Email  
75.
Which of the following has the ability to deny only FTP traffic between two devices in the same VLAN?
  • A.
    IP Source Guard
  • B.
    Protected ports
  • C.
    Private VLANs
  • D.
    VLAN ACL
  • Answer & Explanation
  • Report
Answer : [D]
Explanation :
Report
Name Email