MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What is DHCP Snooping?
a. A method to automatically assign IP addresses
b. A Layer 2 security feature to prevent unauthorized DHCP servers
c. A routing protocol
d. A type of firewall
Answer: b. A Layer 2 security feature to prevent unauthorized DHCP serversuninets+2
What type of ports does DHCP Snooping classify on a switch?
a. Open and closed
b. Active and inactive
c. Trusted and untrusted
d. Static and dynamic
Answer: c. Trusted and untrustednetworklessons+2
Which ports are allowed to send DHCP Offer and DHCP ACK messages in DHCP Snooping?
a. Untrusted ports
b. Trusted ports
c. Both trusted and untrusted ports
d. No ports
Answer: b. Trusted portscbtnuggets+2
What happens to DHCP Offer messages received on untrusted ports?
a. They are forwarded to clients
b. They are blocked and discarded
c. They are logged only
d. They restart the DHCP service
Answer: b. They are blocked and discardeduninets+1
How does DHCP Snooping help protect a network?
a. Prevents unauthorized devices from acting as DHCP servers
b. Encrypts DHCP traffic
c. Blocks all DHCP traffic
d. Eliminates the need for DHCP servers
Answer: a. Prevents unauthorized devices from acting as DHCP serverscbtnuggets+1
What is a DHCP Starvation attack?
a. When DHCP servers allocate all addresses to valid users
b. When an attacker floods the network with fake DHCP requests to exhaust IP addresses
c. When DHCP servers run out of power
d. When clients reject DHCP Offer messages
Answer: b. When an attacker floods the network with fake DHCP requests to exhaust IP addressesuninets+1
How does DHCP Snooping mitigate DHCP Starvation attacks?
a. Blocks all DHCP messages
b. Rate-limits DHCP requests on untrusted ports
c. Encrypts DHCP messages
d. Forces authentication for DHCP messages
Answer: b. Rate-limits DHCP requests on untrusted portscbtnuggets+1
What kind of information does the DHCP Snooping Binding Database maintain?
a. IP addresses only
b. MAC addresses only
c. IP-MAC bindings, lease time, VLAN number, and interface info
d. DNS records
Answer: c. IP-MAC bindings, lease time, VLAN number, and interface infojuniper+2
What happens if a DHCP packet from an untrusted port does not match an entry in the DHCP Snooping Binding Database?
a. It is forwarded
b. It is dropped
c. It is sent to the DHCP server for checking
d. It triggers DHCP server reboot
Answer: b. It is droppedpynetlabs+1
Which layer of the OSI model does DHCP Snooping operate at?
a. Layer 1 (Physical)
b. Layer 2 (Data Link)
c. Layer 3 (Network)
d. Layer 4 (Transport)
Answer: b. Layer 2 (Data Link)networklessons+1
Why are ports connected to DHCP servers marked as trusted?
a. To block all DHCP traffic on these ports
b. To allow DHCP Offer and ACK messages only from legitimate servers
c. To disable DHCP services on these ports
d. To speed up the traffic
Answer: b. To allow DHCP Offer and ACK messages only from legitimate serversnetworklessons+1
What do untrusted ports typically connect to in DHCP Snooping setup?
a. DHCP servers
b. Switch core
c. Client devices like PCs and printers
d. Routers
Answer: c. Client devices like PCs and printerspynetlabs+1
If a DHCP ACK message is received, what does the switch do with the DHCP Snooping database?
a. Updates lease info for IP-MAC bindings
b. Deletes all entries in the database
c. Ignores the message
d. Logs the message only
Answer: a. Updates lease info for IP-MAC bindingsjuniper
Can DHCP Snooping help in preventing man-in-the-middle attacks?
a. Yes, by blocking rogue DHCP servers
b. No, it doesn’t affect MITM attacks
c. Only if combined with encryption
d. Only on Layer 3 devices
Answer: a. Yes, by blocking rogue DHCP serversyeahhub+2
What is DHCP Spoofing?
a. When a DHCP server runs out of IP addresses
b. When an attacker pretends to be a DHCP server to provide false IP info
c. When clients do not accept IP addresses
d. When DHCP messages are encrypted
Answer: b. When an attacker pretends to be a DHCP server to provide false IP infouninets+1
How does a network device initially request an IP address?
a. Sends a DHCP Request directly to a DHCP server
b. Sends a DHCP Discover broadcast message
c. Pings all IP addresses
d. Sends data packets without an IP address
Answer: b. Sends a DHCP Discover broadcast messagecbtnuggets+1
What is a DHCP Offer message?
a. A message from a client requesting an IP address
b. A message from a DHCP server offering an IP address
c. A message denying an IP address
d. A message to refresh IP lease
Answer: b. A message from a DHCP server offering an IP addressuninets+1
What action does DHCP Snooping take when malformed DHCP messages are detected?
a. Forwards them to the DHCP server
b. Drops the messages
c. Logs and forwards them
d. Sends alerts only
Answer: b. Drops the messagespynetlabs
How does DHCP Snooping enhance integration with other security features?
a. By providing a binding database for Dynamic ARP Inspection and IP Source Guard
b. By blocking all ARP messages
c. By encrypting IP packets
d. By replacing firewall functionality
Answer: a. By providing a binding database for Dynamic ARP Inspection and IP Source Guarduninets
Can DHCP Snooping be used on VLANs?
a. No, it only works on physical interfaces
b. Yes, DHCP Snooping can be enabled per VLAN
c. Only on Layer 3 VLANs
d. Only with routers
Answer: b. Yes, DHCP Snooping can be enabled per VLANjuniper+1
What is the DHCP ACK message?
a. A message from client accepting an IP address
b. A message from DHCP server acknowledging the lease of IP
c. A message denying a lease request
d. A message to refresh DHCP lease
Answer: b. A message from DHCP server acknowledging the lease of IPcbtnuggets+1
What does the switch do when it receives a DHCP NAK message?
a. Updates the binding database
b. Deletes the placeholder binding entry
c. Ignores the message
d. Sends an alert to admin
Answer: b. Deletes the placeholder binding entryjuniper
What could happen if DHCP Snooping is not configured in a network?
a. Network performance improves
b. Unauthorized DHCP servers may disrupt IP address assignments
c. DHCP eliminates all IP conflicts
d. No DHCP service runs
Answer: b. Unauthorized DHCP servers may disrupt IP address assignmentscbtnuggets+1
Which of the following is NOT a benefit of DHCP Snooping?
a. Prevents rogue DHCP servers
b. Prevents DHCP starvation attacks
c. Encrypts DHCP traffic
d. Maintains IP-MAC binding database
Answer: c. Encrypts DHCP trafficuninets+1
What term describes the switch’s record of IP and MAC address mappings in DHCP Snooping?
a. DHCP lease file
b. Binding database
c. Routing table
d. ACL table
Answer: b. Binding databasepynetlabs+1
What is usually the status of ports by default before DHCP Snooping is configured?
a. Trusted
b. Untrusted
c. Disabled
d. Admin shut down
Answer: b. Untrustednetworklessons+1
How would you prevent a rogue server from distributing IP addresses?
a. Use DHCP Relay Agent
b. Enable DHCP Snooping and set ports correctly
c. Disable DHCP on switch
d. Use static IP addressing only
Answer: b. Enable DHCP Snooping and set ports correctlycbtnuggets+1
What IP address assignments does DHCP Snooping help validate?
a. Only static IP addresses
b. Only DHCP assigned IP addresses with known MACs
c. Only private IP addresses
d. Only public IP addresses
Answer: b. Only DHCP assigned IP addresses with known MACsuninets
What type of attack can DHCP Snooping help protect against by filtering invalid DHCP messages?
a. Denial of Service
b. DHCP Spoofing
c. Buffer Overflow
d. SQL Injection
Answer: b. DHCP Spoofingcbtnuggets+1
What simple feature of DHCP Snooping helps to avoid flooding the network with fake DHCP requests?
a. Flood control
b. Rate limiting on untrusted ports
c. DHCP binding refresh
d. Port shutdown
Answer: b. Rate limiting on untrusted portsuninets+1
Which command type is usually used to configure trusted ports for DHCP Snooping on a switch?
a. Port shutdown
b. Port trust activation
c. DHCP bind command
d. DHCP enable
Answer: b. Port trust activationnetworklessons+1
What is the purpose of the DHCP Discover message?
a. To find an available DHCP server on the network
b. To offer an IP address
c. To confirm lease expiration
d. To renew IP address
Answer: a. To find an available DHCP server on the networkcbtnuggets
Does DHCP Snooping filter DHCP Request messages from untrusted ports?
a. No, requests are always forwarded
b. Yes, requests are checked against binding database
c. No filtering occurs
d. Only filtered on trusted ports
Answer: b. Yes, requests are checked against binding databasepynetlabs
What happens when DHCP Snooping receives a DHCP Offer from an untrusted port?
a. The offer is forwarded as normal
b. The offer is dropped
c. The offer is modified and relayed
d. An alert is sent
Answer: b. The offer is droppednetworklessons+1
Which DHCP message confirms the IP lease by the server to the client?
a. Discover
b. Offer
c. Request
d. ACK
Answer: d. ACKcbtnuggets
Can DHCP Snooping help maintain accurate IP-MAC address bindings?
a. Yes, by tracking DHCP transactions
b. No, it does not maintain bindings
c. Only on Layer 3 routers
d. Only on wireless networks
Answer: a. Yes, by tracking DHCP transactionspynetlabs+1
What role does DHCP Snooping play in dynamic ARP inspection?
a. Provides binding data to validate ARP packets
b. Disables ARP inspection
c. Encrypts ARP traffic
d. Inspects all IP packets
Answer: a. Provides binding data to validate ARP packetsuninets
What does setting a port as untrusted in DHCP Snooping imply?
a. The port can send DHCP Offer messages
b. The port cannot send DHCP Offer or ACK messages
c. The port forwards all DHCP packets
d. The port is disabled for DHCP
Answer: b. The port cannot send DHCP Offer or ACK messagesuninets
What is the main security risk DHCP Snooping addresses?
a. IP address spoofing by rogue DHCP servers
b. Data encryption during transfer
c. DNS spoofing
d. Firewall configuration
Answer: a. IP address spoofing by rogue DHCP serverscbtnuggets+1
What is the effect of improperly configuring DHCP Snooping on trusted ports?
a. Disruption in DHCP service, causing clients to not get IP addresses
b. Improved network performance
c. No effect
d. Increased IP address pool
Answer: a. Disruption in DHCP service, causing clients to not get IP addressesuninets
What action is taken when a DHCP Snooping switch receives DHCP packets that do not conform to the DHCP protocol?
a. They are forwarded with warnings
b. They are dropped
c. They are routed to other VLANs
d. They cause a switch reboot
Answer: b. They are droppedpynetlabs
What is an example of a scenario DHCP Snooping protects against?
a. Unauthorized DHCP server giving fake default gateway information
b. Clients manually setting IP addresses
c. Router hardware failure
d. DNS server failures
Answer: a. Unauthorized DHCP server giving fake default gateway informationnetworklessons+1
Which device typically runs the authorized DHCP server in a network using DHCP Snooping?
a. Switch
b. Router or dedicated DHCP server
c. Client device
d. Firewall
Answer: b. Router or dedicated DHCP servernetworklessons+1
What is the effect of DHCP Snooping on the DHCP Discover message?
a. It forwards through all ports without filtering
b. It blocks the message on untrusted ports
c. It modifies the message
d. It drops the message on trusted ports
Answer: a. It forwards through all ports without filteringpynetlabs+1
Can DHCP Snooping be bypassed by encrypting DHCP messages?
a. Yes, encryption removes the need for snooping
b. No, DHCP message lacks encryption by default, snooping inspects them in plain text
c. Yes, encryption disables DHCP Snooping
d. No, it encrypts the traffic itself
Answer: b. No, DHCP message lacks encryption by default, snooping inspects them in plain textcbtnuggets
What is a placeholder binding entry in DHCP Snooping?
a. Entry added when DHCP Request is received but before DHCP ACK
b. Entry added before client sends a Discover
c. Entry added when lease time expires
d. Entry added after client’s reboot
Answer: a. Entry added when DHCP Request is received but before DHCP ACKjuniper
What happens if DHCP Snooping is not enabled on a switch?
a. DHCP traffic is controlled by switch automatically
b. No validation of DHCP messages, leading to spoofing risks
c. Switch disables DHCP service
d. DHCP packets are always dropped
Answer: b. No validation of DHCP messages, leading to spoofing risksuninets+1
What makes a DHCP server “rogue”?
a. The server is authorized and controlled by network admin
b. It is unauthorized and tries to assign IP addresses on a network
c. It sends encrypted messages
d. It handles DHCP leases normally
Answer: b. It is unauthorized and tries to assign IP addresses on a networkuninets
What is the benefit of enabling DHCP Snooping on client access ports?
a. Prevent unauthorized DHCP Offer messages from clients
b. Increase DHCP pool size
c. Disable static IP addresses
d. Speed up DHCP transactions
Answer: a. Prevent unauthorized DHCP Offer messages from clientsnetworklessons
Does DHCP Snooping replace DHCP server authentication?
a. Yes, it fully authenticates servers
b. No, it controls message flow and validates bindings but does not authenticate servers cryptographically
c. Yes, it encrypts DHCP requests
d. No, it only changes IP addresses
Answer: b. No, it controls message flow and validates bindings but does not authenticate servers cryptographicallypynetlabs+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info