HP
HP0-Y43 · Question #56
View the exhibit. Based on the configuration shown in the exhibit, does the Comware switch drop or permit each frame as it arrives on port GigigabitEthernet 1/0/1 ? Select three.
The correct answer is A. DHCP offer are permitted. C. DHCP Discovery (option 82 set) are permitted. F. ARP response for 10.1.10.2 is dropped. dhcp-snooping information enable Use the dhcp-snooping information enable command to enable DHCP snooping Option 82. dhcp-snooping information strategy replace Use the dhcp-snooping information strategy command to configure the handling strategy for Option 82 in requesting…
Implement Network Services and Security
Question
View the exhibit. Based on the configuration shown in the exhibit, does the Comware switch drop or permit each frame as it arrives on port GigigabitEthernet 1/0/1 ? Select three.
Exhibit
Options
- ADHCP offer are permitted.
- BDHCP offer are dropped.
- CDHCP Discovery (option 82 set) are permitted.
- DDHCP Discovery (option 82 set) are dropped.
- EARP response for 10.1.10.2 is permitted.
- FARP response for 10.1.10.2 is dropped.
How the community answered
(31 responses)- A74% (23)
- B10% (3)
- D13% (4)
- E3% (1)
Explanation
- dhcp-snooping information enable Use the dhcp-snooping information enable command to enable DHCP snooping Option 82. * dhcp-snooping information strategy replace Use the dhcp-snooping information strategy command to configure the handling strategy for Option 82 in requesting messages. drop: Drops the requesting message containing Option 82. keep: Forwards the requesting message containing Option 82 without changing Option 82. replace: Forwards the requesting message containing Option 82 after replacing the original Option 82 with the one padded in specified format. * dhcp-snooping information remote-id string switch001 Use the dhcp-snooping information remote-id command to configure the remote ID sub-option in Option 82. * display dhcp-snooping Use the display dhcp-snooping command to display the user IP-MAC address mapping entries recorded by the DHCP snooping function. Only the address 10.1.10.10 is being displayed The address 10.1.10.2 is not displayed. This ARP packet will be dropped. Note: DHCP snooping is an important component in the defense against ARP spoofing. ARP security checks the IP address in the Source Protocol Address field of ARP packets. If that IP address is not an address that DHCP snooping has recorded as being in use by a host connected to the ingress port of the ARP, then the ARP packet is dropped.
Topics
#DHCP snooping#ARP inspection#option 82#Comware security
Community Discussion
No community discussion yet for this question.
