What are two security features at the access port level that can help mitigate Layer 2 attacks?

What are two security features at the access port level that can help mitigate Layer 2 attacks?
(Choose two.)

What are two security features at the access port level that can help mitigate Layer 2 attacks?
(Choose two.)

A.
DHCP snooping

B.
IP Source Guard

C.
Telnet

D.
Secure Shell

E.
SNMP



Leave a Reply 1

Your email address will not be published. Required fields are marked *


JackP

JackP

Answer is correct:

°DHCP Snooping = DHCP snooping acts like a firewall between untrusted hosts and DHCP servers. You use DHCP snooping to differentiate between untrusted interfaces connected to the end user and trusted interfaces connected to the DHCP server or another switch
°IP Source Guard= P source guard is a security feature that filters traffic based on the DHCP snooping binding database and on manually configured IP source bindings in order to restrict IP traffic on non-routed Layer 2 interfaces

https://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750-series-switches/72846-layer2-secftrs-catl3fixed.html#dhcpsnoop