exam questions

Exam 400-351 All Questions

View all questions & answers for the 400-351 exam

Exam 400-351 topic 2 question 212 discussion

Actual exam question from Cisco's 400-351
Question #: 212
Topic #: 2
[All 400-351 Questions]

What are two features that help to mitigate man-in-the-middle attacks? (Choose two.)

  • A. DHCP snooping
  • B. ARP sniffing on specific ports
  • C. ARP spoofing
  • D. dynamic ARP inspection
  • E. destination MAC ACLs
Show Suggested Answer Hide Answer
Suggested Answer: AD 🗳️
The primary Cisco IOS Software features on the Cisco Catalyst 6500E (Cisco IOS Software 12.2(33)SXI1) that was used to mitigate the MITM (ARP Poisoning) attack are DHCP Snooping and Dynamic ARP Inspection (referred to as DAI throughout this paper). DAI has a dependency on DHCP Snooping. In order to run
DAI, DHCP Snooping must be enabled.
Reference:http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6500-series-switches/white_paper_c11_603839.html

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Currently there are no comments in this discussion, be the first to comment!
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...