Quiz

Question 1

You issue the ip arp inspection vlan 1 command on SW1. Which of the following statements is true about SW1 after issuing the command?

1. All interfaces in VLAN 1 are untrusted.

2. DAI isn't fully enabled until globally enabled with ip arp inspection.

3. Only ARP messages from hosts with static IP address will be permited.

4. DHCP snooping is enabled.

Solution

1. All interfaces in VLAN 1 are untrusted.

Question 2

The following commands are configured on SW1. Which of the following statements is true after the commands have been issued?

1. DAI validation is only enabled for IP addresses.

2. DAI validation is only enabled for source MAC addresses.

3. DAI validation is only enabled for destination MAC addresses.

4. DAI validation is enabled for all three causes.

Solution

1. DAI validation is only enabled for destination MAC addresses.

Question 3

Which of the following are true about DAI rate limiting? (select two)

1. It is enabled on trusted and untrusted ports by default.

2. It is enabled on untrusted ports by default.

3. It is enabled at a rate of 10 packets per second by default.

4. It is enabled at a rate of 15 packets per second by default.

Solution

1. It is enabled on untrusted ports by default.

1. It is enabled at a rate of 15 packets per second by default.

Question 4

DAI inspects the sender IP and MAC addresses to determine wheter an ARP packet should be forwarded or dropped. Which of the following does it check the sender IP and MAC against? (select two)

1. MAC address table.

2. DHCP snooping binding table.

3. ARP table.

4. ARP ACLs.

Solution

1. DHCP snooping binding table.

1. ARP ACLs

Question 5

Which of the following commands limit ARP messages to a maximum average of 15 per second? (select two)

1. ip arp inspection limit rate 15

2. ip arp inspection limit rate 30 burst interval 3

3. ip arp inspection limit rate 45 burst interval 3

4. ip arp inspection limit rate 30 burst interval 1

Solution

1. ip arp inspection limit rate 15

1. ip arp inspection limit rate 45 burst interval 3