MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which network device is most commonly configured for DHCP Snooping?
   a. Router
   b. Switch
   c. Access Point
   d. Firewall
   Answer: b. Switchstudocu+1
2. What is the primary purpose of DHCP Snooping in networks?
   a. Encrypt DHCP traffic
   b. Enhance bandwidth
   c. Prevent rogue DHCP servers
   d. Assign static IPs
   Answer: c. Prevent rogue DHCP serversuninets+1
3. Before configuring DHCP Snooping on a switch, what must be enabled globally?
   a. ARP Inspection
   b. DHCP Snooping
   c. VLAN Routing
   d. Port Security
   Answer: b. DHCP Snoopingitnetworkingskills.wordpress+1
4. Which command enables DHCP Snooping globally on Cisco IOS switches?
   a. ip dhcp snooping enable
   b. ip dhcp snooping
   c. dhcp snooping config
   d. enable dhcp snooping vlan
   Answer: b. ip dhcp snoopingitexamanswers+1
5. What is an untrusted port in DHCP Snooping configuration?
   a. A port connected to the DHCP server
   b. A port connected to clients
   c. A port with static IP
   d. A port disabled for DHCP
   Answer: b. A port connected to clients9tut+1
6. What type of DHCP messages are blocked on untrusted ports by DHCP Snooping?
   a. DHCP Discover
   b. DHCP Request
   c. DHCP Offer and DHCP ACK
   d. DHCP Decline
   Answer: c. DHCP Offer and DHCP ACKmanageengine+1
7. Which table does DHCP Snooping create to track IP-MAC address bindings?
   a. ARP Table
   b. Routing Table
   c. DHCP Binding Table
   d. DNS Table
   Answer: c. DHCP Binding Tablecloudswit+1
8. On a Cisco switch, which interface command sets a port as trusted for DHCP Snooping?
   a. switchport dhcp trust
   b. ip dhcp snooping trust
   c. dhcp snooping enable
   d. trust dhcp snooping interface
   Answer: b. ip dhcp snooping truststudocu+1
9. What should be done to protect VLAN 10 with DHCP Snooping?
   a. Enable snooping globally and on VLAN 10
   b. Disable snooping on VLAN 10
   c. Enable on client ports only
   d. Use static IP on VLAN 10
   Answer: a. Enable snooping globally and on VLAN 10studocu
10. Which attack is prevented by limiting DHCP messages per second on an untrusted port?
    a. ARP Spoofing
    b. DHCP Starvation
    c. DNS Poisoning
    d. MAC Flooding
    Answer: b. DHCP Starvationipcisco+1
11. What is one sign of a rogue DHCP server on a network?
    a. Slow network speeds
    b. Clients receive incorrect gateway or DNS
    c. Port flapping
    d. VLAN trunking errors
    Answer: b. Clients receive incorrect gateway or DNSnetworklessons+1
12. Disabling which DHCP option enhances compatibility when DHCP Snooping is enabled?
    a. Option 66
    b. Option 82
    c. Option 150
    d. Option 12
    Answer: b. Option 82itnetworkingskills.wordpress+1
13. What information is NOT stored in the DHCP Snooping binding table?
    a. MAC address
    b. Port number
    c. IP address
    d. Switch hostname
    Answer: d. Switch hostnamecloudswit+1
14. Which layer of the OSI model does DHCP Snooping operate on?
    a. Layer 1
    b. Layer 2
    c. Layer 3
    d. Layer 7
    Answer: b. Layer 2uninets+1
15. Which configuration must be applied to all switches participating in DHCP Snooping?
    a. Enable snooping globally
    b. Set all ports as untrusted
    c. Shut down unused VLANs
    d. Disable option 66
    Answer: a. Enable snooping globally9tut+1
16. How does DHCP Snooping mitigate man-in-the-middle attacks?
    a. Encrypts DHCP messages
    b. Filters out unauthorized DHCP responses
    c. Disables DHCP entirely
    d. Binds IP to MAC addresses
    Answer: b. Filters out unauthorized DHCP responsesversitron+1
17. What kind of port is eligible to forward DHCP OFFER packets in DHCP Snooping?
    a. Untrusted port
    b. Trusted port
    c. SPAN port
    d. Disabled port
    Answer: b. Trusted portnetworklessons+1
18. Which feature often works alongside DHCP Snooping for security?
    a. Port Security
    b. IP Source Guard
    c. VLAN Trunking
    d. SNMPv3
    Answer: b. IP Source Guardcloudswit+1
19. Which type of attack does DHCP Snooping help prevent in addition to rogue servers?
    a. DNS amplification
    b. DHCP Starvation
    c. BGP hijacking
    d. SSL stripping
    Answer: b. DHCP Starvationversitron+1
20. Why should client-facing switchports be set to ‘untrusted’ in DHCP Snooping?
    a. To prevent ARP broadcast
    b. To block DHCP Offer messages
    c. To enable PoE
    d. To allow routing
    Answer: b. To block DHCP Offer messages9tut+1
21. What must be configured on a trunk port between two switches using DHCP Snooping?
    a. Set as trusted if carrying DHCP server messages
    b. Disable DHCP Snooping
    c. Limit to only VLAN 1
    d. Enable ARP Inspection only
    Answer: a. Set as trusted if carrying DHCP server messagesnetworklessons+1
22. Which command limits the rate of DHCP requests on a Cisco switch interface?
    a. ip dhcp snooping limit rate
    b. dhcp snooping speed control
    c. interface dhcp rate-limit
    d. dhcp snooping set rate
    Answer: a. ip dhcp snooping limit rateipcisco+1
23. What happens if the DHCP Snooping binding table is deleted?
    a. All ports become untrusted
    b. IP-MAC mappings are lost
    c. VLANs get disabled
    d. DHCP Snooping stops working
    Answer: b. IP-MAC mappings are lostscribd
24. In which network scenario is DHCP Snooping most beneficial?
    a. Static IP addressing only
    b. Multiple DHCP servers present
    c. No DHCP required
    d. No VLANs present
    Answer: b. Multiple DHCP servers presentuninets+1
25. Which devices can respond to DHCP Discover messages when DHCP Snooping is enabled?
    a. Any host
    b. Trusted DHCP server only
    c. All untrusted ports
    d. Routers only
    Answer: b. Trusted DHCP server onlyuninets+1
26. How is DHCP Snooping verified after configuration?
    a. Check DHCP Binding Table
    b. Ping to default gateway
    c. SNMP trap
    d. Show VLAN brief
    Answer: a. Check DHCP Binding Tablemanageengine+1
27. Why should the Option 82 insertion be disabled in some DHCP Snooping setups?
    a. To enable ARP Inspection
    b. For compatibility with certain DHCP servers
    c. To allow SNMP monitoring
    d. To enable VLAN trunking
    Answer: b. For compatibility with certain DHCP serversitnetworkingskills.wordpress+1
28. What is the result of misconfiguring all ports as trusted?
    a. Rogue DHCP server may assign IP addresses
    b. DHCP traffic is blocked
    c. All clients lose network connectivity
    d. Users get duplicate IPs
    Answer: a. Rogue DHCP server may assign IP addressesversitron+1
29. DHCP Snooping binding table typically maintains which details?
    a. Time-to-live for packets
    b. IP address, MAC address, VLAN, port
    c. DNS server addresses only
    d. Username and password
    Answer: b. IP address, MAC address, VLAN, portipcisco+1
30. What is required to enable DHCP Snooping on a VLAN?
    a. Enter ‘ip dhcp snooping vlan <vlan-id>’ command
    b. Enter ‘enable dhcp snooping vlan’
    c. ‘switchport dhcp snooping’ in interface mode
    d. Specify VLAN in ARP table
    Answer: a. Enter ‘ip dhcp snooping vlan <vlan-id>’ commandstudocu+1
31. Which attack can DHCP Snooping NOT prevent?
    a. IP address spoofing
    b. DHCP Starvation
    c. DNS cache poisoning
    d. Rogue DHCP server attacks
    Answer: c. DNS cache poisoningversitron+1
32. When is DHCP Snooping NOT recommended?
    a. In static IP environments
    b. In networks with critical DHCP traffic
    c. In networks using only trusted DHCP servers
    d. In networks with many VLANs
    Answer: a. In static IP environmentsmanageengine+1
33. Which option accurately describes a trusted port in DHCP Snooping?
    a. Cannot send DHCP offers
    b. Can receive and send DHCP responses
    c. Only connects to clients
    d. Disables VLAN routing
    Answer: b. Can receive and send DHCP responses9tut+1
34. Which security feature is commonly used with DHCP Snooping to further validate IP-MAC assignments?
    a. Dynamic ARP Inspection
    b. Access Control Lists
    c. SNMPv3
    d. Port Mirroring
    Answer: a. Dynamic ARP Inspectionmanageengine+1
35. What is one administrative benefit of enabling DHCP Snooping?
    a. Automatic VLAN creation
    b. Tracking client IP assignments in binding table
    c. Faster switch convergence
    d. Enhanced WiFi coverage
    Answer: b. Tracking client IP assignments in binding tablecloudswit+1
36. Which DHCP message does DHCP Snooping inspect for authenticity?
    a. DHCP Discover
    b. DHCP Request
    c. DHCP Offer
    d. DHCP Inform
    Answer: c. DHCP Offernetworklessons+1
37. To recover from a rate-limit violation on an interface, which command should be used?
    a. errdisable recovery cause dhcp-rate-limit
    b. dhcp snooping reset
    c. ip dhcp snooping trust
    d. vlan recovery enable
    Answer: a. errdisable recovery cause dhcp-rate-limititnetworkingskills.wordpress
38. Which port role should be assigned to end-user device connections in DHCP Snooping?
    a. Trusted
    b. Untrusted
    c. Disabled
    d. Routing
    Answer: b. Untrustedipcisco+1
39. What information is checked before allowing DHCP responses in DHCP Snooping?
    a. VLAN ID only
    b. MAC address, IP address, port, lease info
    c. DNS domain name
    d. Interface speed
    Answer: b. MAC address, IP address, port, lease infocloudswit+1
40. How is DHCP Snooping enabled for multiple VLANs?
    a. Use ‘ip dhcp snooping vlan <start>-<end>’
    b. Use VLAN routing
    c. Enable on trunk ports only
    d. Configure DHCP exclusion ranges
    Answer: a. Use ‘ip dhcp snooping vlan <start>-<end>’studocu+1
41. What could happen if DHCP Snooping is not implemented in a large enterprise?
    a. No clients can get IP addresses
    b. Rogue DHCP servers might disrupt network
    c. Switches fail to boot
    d. VLANs merge automatically
    Answer: b. Rogue DHCP servers might disrupt networkuninets+1
42. Who generally configures DHCP Snooping in an organization?
    a. End-users
    b. Network administrators
    c. Application developers
    d. Database administrators
    Answer: b. Network administratorsnetworklessons+1
43. What effect does DHCP Snooping rate-limiting provide?
    a. Minimizes network bandwidth
    b. Prevents DHCP starvation attacks
    c. Makes all ports trusted
    d. Routes DHCP across VLANs
    Answer: b. Prevents DHCP starvation attacksitnetworkingskills.wordpress+1
44. Which of the following is not a function of DHCP Snooping?
    a. Preventing rogue DHCP responses
    b. Maintaining DHCP binding table
    c. Encrypting DHCP traffic
    d. Validating DHCP messages
    Answer: c. Encrypting DHCP trafficmanageengine+1
45. Which message is blocked on untrusted ports by DHCP Snooping?
    a. DHCP Request
    b. DHCP Offer
    c. DHCP Discover
    d. ARP Reply
    Answer: b. DHCP Offer9tut+1
46. What is the result when an attacker floods a network with DHCP requests and DHCP Snooping isn’t enabled?
    a. Server bypasses requests
    b. DHCP pool is exhausted
    c. Server assigns static IPs
    d. Trunk ports stop forwarding
    Answer: b. DHCP pool is exhaustedversitron+1
47. In which Cisco IOS mode is ‘ip dhcp snooping trust’ set?
    a. Global config mode
    b. Interface config mode
    c. User exec mode
    d. Privileged mode
    Answer: b. Interface config modestudocu+1
48. When configuring DHCP Snooping, which feature should be used to validate downstream DHCP responses?
    a. DHCP relay
    b. Trusted interfaces
    c. VLAN trunking
    d. Port security
    Answer: b. Trusted interfacesnetworklessons+1
49. Why should rate limiting be set on untrusted DHCP Snooping ports?
    a. To conserve switch resources
    b. To prevent attacks that deplete DHCP IP pool
    c. To improve switch speed
    d. To enable SNMPv3
    Answer: b. To prevent attacks that deplete DHCP IP poolipcisco+1
50. What does DHCP Snooping do when it detects an unauthorized DHCP server?
    a. Logs the server activity
    b. Drops DHCP server messages on untrusted ports
    c. Allows DHCP messages only from routers
    d. Forwards server traffic to admin VLAN
    Answer: b. Drops DHCP server messages on untrusted portsuninets+1

1. https://www.studocu.com/row/document/national-university-of-sciences-and-technology/advance-computer-networks/dhcp-snooping-description-about-network-fundamental/66558768
2. https://www.9tut.com/dhcp-snooping-tutorial
3. https://www.uninets.com/blog/configure-dhcp-snooping
4. https://www.manageengine.com/products/eventlog/kb/server/dhcp-snooping.html
5. https://itnetworkingskills.wordpress.com/2023/05/14/dhcp-snooping-configuration-verification/
6. https://itexamanswers.net/11-6-4-module-quiz-switch-security-configuration-answers.html
7. https://ipcisco.com/lesson/what-is-dhcp-snooping/
8. https://cloudswit.ch/blogs/what-is-dhcp-snooping-and-how-does-it-work/
9. https://networklessons.com/switching/dhcp-snooping
10. https://www.versitron.com/blogs/post/dhcp-snooping-secrets-fortifying-networks-against-unauthorized-intruders
11. https://www.scribd.com/document/656155103/2-3-1-DHCP-SNOOPING
12. https://www.sanfoundry.com/computer-networks-questions-answers-dhcp/
13. https://www.scribd.com/document/564742072/This-set-of-Computer-Networks-Multiple-Choice-Questions
14. https://edurev.in/test/28334/Test-DHCP–Dynamic-Host-Configuration-Protocol-
15. https://trustedinstitute.com/concept/comptia-a-plus/network-protocols/dhcp/
16. https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus3548/103x/configuration/security/cisco-nexus-3548-nx-os-security-configuration-guide-103x/m-configuring-dhcp-snooping.pdf
17. https://networkwalks.com/dhcp-quiz-online-2/
18. https://www.cbtnuggets.com/blog/technology/networking/what-is-dhcp-snooping
19. https://itexamanswers.net/lab-74-configuring-dhcp-snooping.html
20. https://www.youtube.com/watch?v=46gzY_ubD2U