Exam 300-160 topic 1 question 350 discussion

Actual exam question from Cisco's 300-160

Question #: 350
Topic #: 1

You use Dynamic ARP Inspection on data center switches Which two options can the switches use to perform ARP validation? (Choose two.)

A. syslog
B. a 802.1x user authentication database
C. access control lists configured on each switch port
D. astatic ARP access list
E. a DHCP binding database

Show Suggested Answer

Suggested Answer: CE 🗳️
Reference: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/releas e/12-2_55_se/configuration/guide/scg_2960/swdynarp.html#pgfId-
1039854

by kbish at July 2, 2019, 8:02 a.m.

Comments

Submit Cancel

Vovasiy

5 years, 5 months ago

Correct answer: DE Dynamic ARP inspection determines the validity of an ARP packet based on valid IP-to-MAC address bindings stored in a trusted database, the DHCP snooping binding database. This database is built by DHCP snooping if DHCP snooping is enabled on the VLANs and on the switch. In non-DHCP environments, dynamic ARP inspection can validate ARP packets against user-configured ARP access control lists (ACLs) for hosts with statically configured IP addresses. https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3se/consolidated_guide/b_consolidated_3850_3se_cg_chapter_0111101.html

upvoted 1 times

...

mike4kz

6 years ago

Access list applies not on the "each switch port" but on VLAN.

upvoted 1 times

...

kbish

6 years ago

Answer DE

upvoted 2 times

...