161k views
0 votes
Which mitigation technique would prevent rogue servers from providing false ip configuration parameters to clients?

2 Answers

3 votes
The answer is DHCP snooping

DHCP snooping acts like a firewall between DHCP servers and untrusted hosts. It differentiates untrusted interfaces connected to the end user and trusted interfaces connected to a switch or DHCP. For DHCP snooping to function correctly, the switches must be connected to all DHCP servers through trusted interfaces.


User Stylesuxx
by
5.2k points
3 votes
DHCP snooping is a mitigation technique to prevent rogue DHCP servers from providing false IP configuration parameters to clients. DHCP snooping is a security feature that acts like a firewall between untrusted hosts and trusted DHCP servers. It is a series of techniques applied to improve the security of a DHCP infrastructure.
User Patrick Chu
by
6.0k points