nerdexam
Microsoft

70-642 · Question #313

Your network contains a server named DC1 that has the DHCP Server role installed. You need to prevent devices that are neither company-owned nor company-managed from being assigned DHCP addresses…

The correct answer is C. Configure DHCP link layer-based filtering. Link layer filtering provides network access control for the issuance or denial of DHCP leases of IP addresses based on a media access control (MAC) address. Link layer filtering can be configured at the IPv4 node for all clients across all IPv4 scopes. This feature is…

Configuring IP Addressing, DNS, and DHCP

Question

Your network contains a server named DC1 that has the DHCP Server role installed. You need to prevent devices that are neither company-owned nor company-managed from being assigned DHCP addresses. What should you enable on the DHCP server?

Options

  • AConfigure name protection
  • BModify the start address
  • CConfigure DHCP link layer-based filtering
  • DConfigure Open Shortest Path First (OSPF) on the router
  • EReconcile the scope.
  • FConfigure Routing Information Protocol version 2 (RIPv2) on the router
  • GAuthorize DC1 in Active Directory
  • HIncrease the database cleanup interval
  • JRestore the database from a backup

How the community answered

(44 responses)
  • A
    5% (2)
  • C
    84% (37)
  • E
    7% (3)
  • G
    2% (1)
  • J
    2% (1)

Explanation

Link layer filtering provides network access control for the issuance or denial of DHCP leases of IP addresses based on a media access control (MAC) address. Link layer filtering can be configured at the IPv4 node for all clients across all IPv4 scopes. This feature is currently available only for IPv4 networks. To enable MAC address filtering Open the DHCP Microsoft Management Console (MMC) In the console tree, double-click the DHCP server you want to configure, right-click IPv4, and then click Properties. Click Filters, and then select the Enable Allow List or the Enable Deny List check box. To configure a new filter Open the DHCP snap-in. In the console tree, double-click the applicable DHCP server, double-click IPv4, double-click Filters, and then right-click Allow or Deny. Click New Filter, and then type a MAC Address and Description. Description is an optional field.

Topics

#DHCP link layer filtering#MAC address filtering#unauthorized devices#network access control

Community Discussion

No community discussion yet for this question.

Full 70-642 Practice