70-642 · Question #313
Your network contains a server named DC1 that has the DHCP Server role installed. You need to prevent devices that are neither company-owned nor company-managed from being assigned DHCP addresses…
The correct answer is C. Configure DHCP link layer-based filtering. Link layer filtering provides network access control for the issuance or denial of DHCP leases of IP addresses based on a media access control (MAC) address. Link layer filtering can be configured at the IPv4 node for all clients across all IPv4 scopes. This feature is…
Question
Your network contains a server named DC1 that has the DHCP Server role installed. You need to prevent devices that are neither company-owned nor company-managed from being assigned DHCP addresses. What should you enable on the DHCP server?
Options
- AConfigure name protection
- BModify the start address
- CConfigure DHCP link layer-based filtering
- DConfigure Open Shortest Path First (OSPF) on the router
- EReconcile the scope.
- FConfigure Routing Information Protocol version 2 (RIPv2) on the router
- GAuthorize DC1 in Active Directory
- HIncrease the database cleanup interval
- JRestore the database from a backup
How the community answered
(44 responses)- A5% (2)
- C84% (37)
- E7% (3)
- G2% (1)
- J2% (1)
Explanation
Link layer filtering provides network access control for the issuance or denial of DHCP leases of IP addresses based on a media access control (MAC) address. Link layer filtering can be configured at the IPv4 node for all clients across all IPv4 scopes. This feature is currently available only for IPv4 networks. To enable MAC address filtering Open the DHCP Microsoft Management Console (MMC) In the console tree, double-click the DHCP server you want to configure, right-click IPv4, and then click Properties. Click Filters, and then select the Enable Allow List or the Enable Deny List check box. To configure a new filter Open the DHCP snap-in. In the console tree, double-click the applicable DHCP server, double-click IPv4, double-click Filters, and then right-click Allow or Deny. Click New Filter, and then type a MAC Address and Description. Description is an optional field.
Topics
Community Discussion
No community discussion yet for this question.