Valid 350-601 Dumps shared by ExamDiscuss.com for Helping Passing 350-601 Exam! ExamDiscuss.com now offer the newest 350-601 exam dumps, the ExamDiscuss.com 350-601 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 350-601 dumps with Test Engine here:
An engineer must implement a solution that prevents untrusted DHCP servers from compromising the network. The feature must be configured on a Cisco Nexus 7000 Series Switch and applied to VLAN 10. The legitimate DHCP servers are connected to interface Ethernet 2/4. Which configuration set must be used to meet these requirements?
Correct Answer: A
The DHCP snooping feature acts as a firewall between untrusted hosts and trusted DHCP servers. It validates DHCP messages received from untrusted sources and filters out invalid messages. To implement this on a Cisco Nexus 7000 Series Switch for VLAN 10, you would enable DHCP snooping for that VLAN and then configure the specific interface connected to the legitimate DHCP servers to be trusted. This ensures that DHCP responses from the legitimate servers are allowed, while responses from any other servers are blocked. References: * Cisco Nexus 7000 Series NX-OS Security Configuration Guide1 * Configuring DHCP Snooping2