nerdexam
Cisco

350-401 · Question #763

Which two commands should you enter to enable IP Source Guard with IP and MAC address filtering?(Choose two)

The correct answer is A. ip verify source tracking E. ip verify source port-security. To enable IP Source Guard with both IP and MAC address filtering, commands like ip verify source tracking leverage DHCP snooping bindings, and ip verify source port-security integrates with port security.

Submitted by thandi_sa· Mar 6, 2026

Question

Which two commands should you enter to enable IP Source Guard with IP and MAC address filtering?(Choose two)

Options

  • Aip verify source tracking
  • Bswitchport port-security
  • Cip verify unicast source
  • Dip verify source
  • Eip verify source port-security

How the community answered

(65 responses)
  • A
    94% (61)
  • B
    3% (2)
  • C
    2% (1)
  • D
    2% (1)

Why each option

To enable IP Source Guard with both IP and MAC address filtering, commands like `ip verify source tracking` leverage DHCP snooping bindings, and `ip verify source port-security` integrates with port security.

Aip verify source trackingCorrect

The `ip verify source tracking` command enables IP Source Guard to use the DHCP snooping binding table, which contains both IP and MAC address bindings, thereby providing both types of filtering.

Bswitchport port-security

The `switchport port-security` command enables port security but does not directly enable IP Source Guard or its filtering mechanisms.

Cip verify unicast source

The `ip verify unicast source` command is not the standard or primary command for enabling IP Source Guard with comprehensive IP and MAC address filtering.

Dip verify source

The `ip verify source` command alone enables IP Source Guard, but for explicit IP and MAC address filtering, more specific keywords like `tracking` or `port-security` are typically used.

Eip verify source port-securityCorrect

The `ip verify source port-security` command enables IP Source Guard to integrate with port security, allowing it to enforce both source IP and MAC addresses based on the port security configuration.

Concept tested: IP Source Guard configuration with IP and MAC filtering

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_snooping/configuration/xe-3s/sec-data-snooping-xe-3s-book/sec-ip-src-guard.html

Topics

#IP Source Guard#Cisco switch security#Layer 2 security#IOS configuration

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice