HP0-Y43 · Question #34

Before you enable dynamic IP lockdown on an 5400 zl switch, which feature must be enabled first?

The correct answer is B. DHCP snooping. DHCP Snooping must be enabled on any vlan that you intend to implement IP Lockdown. Note: Dynamic IP Lockdown is a new feature that provides IP address level port based security to protect against IP spoofing attacks. Malicious users often spoof their IP address to circumvent…

Implement Network Services and Security

Question

Options

Aconnection-rate filtering
BDHCP snooping
CARP protection
Dport security with eavesdropping protection

How the community answered

(54 responses)

A
17% (9)
B
70% (38)
C
4% (2)
D
9% (5)

Explanation

DHCP Snooping must be enabled on any vlan that you intend to implement IP Lockdown. Note: Dynamic IP Lockdown is a new feature that provides IP address level port based security to protect against IP spoofing attacks. Malicious users often spoof their IP address to circumvent security controls and to avoid being tracked. This can range from applications that authenticate via source IP address to Access Control List (ACL) that permit traffic based on source IP address.

Topics

#dynamic IP lockdown#DHCP snooping#feature prerequisites#HP 5400 zl

Community Discussion

No community discussion yet for this question.

Full HP0-Y43 Practice