Dynamic ARP Inspection

Question 1

Which three functions does Dynamic ARP Inspection perform with invalid IP-to MAC address
bindings? (Choose three)
A. deletes
B. logs
C. accepts
D. intercepts
E. discards
F. bypasses

Answer 1

B. logs
D. intercepts
E. discards

Question 2

How to configure dynamic ARP inspection on a VLAN?
A. (config)# ip arp inspection vlan
B. (config-if)# ip arp inspection vlan
C. (config-router)# ip arp inspection vlan
D. #ip arp inspection vlan

Answer 2

A. (config)# ip arp inspection vlan

Question 3

Which method is used to prevent from ARP poisoning?
A. Dynamic ARP Inspection
B. DHCP Snooping

Answer 3

A. Dynamic ARP Inspection

Question 4

Which command do you enter to enable Dynamic ARP Inspection for VLAN 15? (CHOOSE 1)
A. SW1(config-vlan)# ip arp inspection vlan 15
B. SW1(config-vlan)# ip arp inspection trust
C. SW1(config-if)# ip arp-inspection trust
D. SW1(config)# ip arp inspection vlan 15

Answer 4

D. SW1(config)# ip arp inspection vlan 15

Question 5

Which commands do you enter to enable Dynamic ARP Inspection for VLAN 15? (CHOOSE 2,SIMILAR QUES.)
A. SW1(config-vlan)# ip arp inspection vlan 15
B. SW1(config-vlan)# ip arp inspection trust
C. SW1(config-if)# ip arp inspection trust
D. SW1(config)# ip arp inspection vlan 15

Answer 5

C. SW1(config-if)# ip arp inspection trust

D. SW1(config)# ip arp inspection vlan 15

Question 6

Which type of attack does dynamic ARP mitigates?
A. Man-in-the-middle
B. DDoS attack
C. Virus

Answer 6

A. Man-in-the-middle

Question 7

Which command makes ARP inspection validate an IP in IP-MAC bindings database?
A. ip arp inspection vlan
B. ip arp inspection trust
C. ip verify source
D. ip arp inspection validate ip

Answer 7

D. ip arp inspection validate ip

Question 8

Which security feature inspects ARP packets based on valid IP-to-MAC address bindings?
A. BPDU guard
B. port security
C. DAI
D. IP source Guard

Answer 8

C. DAI

Question 9

You are configuring dynamic ARP inspection. Which command must you configure on the device to detect unexpected IP addresses in the ARP packet?
A. ip arp inspection validate ip
B. ip verify source
C. ip are inspection trust
D. ip are inspection vlan

Answer 9

A. ip arp inspection validate ip