Fortinet Exam NSE6_FSW-7.2 Topic 5 Question 19 Discussion

Actual exam question for Fortinet's NSE6_FSW-7.2 exam

Question #: 19
Topic #: 5

Which two statements about DHCP snooping enabled on a FortiSwitch VLAN are true? (Choose two.)

AEnabling DHCP snooping on a FortiSwitch VLAN ensures requests and replies are seen by all DHCP servers.

Bswitch-controller-dhcp-snooping-verify-mac verifies the destination MAC address to protect against DHCP exhaustion attacks.

CBy default, all FortiSwitch ports are set to forward client DHCP requests to untrusted ports.

DSettings related to DHCP option 82 are only configurable through the CLI

Show Suggested Answer

Suggested Answer: D

by Roselle at Sep 18, 2024, 11:13 AM

Limited Time Offer

25%

Off

Get Premium NSE6_FSW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Pamella

1 months ago

With DHCP snooping, your network will be so secure, even the DHCP server won't know what's going on!

upvoted 0 times

...

Iraida

1 months ago

These DHCP snooping questions are like playing 'Where's Waldo' - gotta find the right answers hidden in all the noise!

upvoted 0 times

Alease

16 days ago

B) switch-controller-dhcp-snooping-verify-mac verifies the destination MAC address to protect against DHCP exhaustion attacks.

upvoted 0 times

...

Stefany

17 days ago

A) Enabling DHCP snooping on a FortiSwitch VLAN ensures requests and replies are seen by all DHCP servers.

upvoted 0 times

...

Gerald

1 months ago

C is wrong. By default, all FortiSwitch ports are set to untrusted, not forwarding client requests.

upvoted 0 times

Carmelina

15 days ago

B) switch-controller-dhcp-snooping-verify-mac verifies the destination MAC address to protect against DHCP exhaustion attacks.

upvoted 0 times

...

Milly

16 days ago

A) Enabling DHCP snooping on a FortiSwitch VLAN ensures requests and replies are seen by all DHCP servers.

upvoted 0 times

...

Jamey

2 months ago

A is incorrect. DHCP snooping only inspects DHCP traffic on the local VLAN, not all DHCP servers. But I like the idea of a 'DHCP eavesdropping' mode!

upvoted 0 times

Jill

1 months ago

switch-controller-dhcp-snooping-verify-mac verifies the destination MAC address to protect against DHCP exhaustion attacks.

upvoted 0 times

...

Reena

1 months ago

A is incorrect. DHCP snooping only inspects DHCP traffic on the local VLAN, not all DHCP servers.

upvoted 0 times

...

France

1 months ago

By default, all FortiSwitch ports are set to forward client DHCP requests to untrusted ports.

upvoted 0 times

...

Jerrod

2 months ago

Enabling DHCP snooping on a FortiSwitch VLAN ensures requests and replies are seen by all DHCP servers.

upvoted 0 times

...

Geoffrey

2 months ago

B and D are correct. DHCP snooping helps protect against DHCP exhaustion attacks, and option 82 settings are only configurable through the CLI.

upvoted 0 times

Nieves

1 months ago

That's good to know. It's important to have these security measures in place to protect the network.

upvoted 0 times

...

Deangelo

2 months ago

B and D are correct. DHCP snooping helps protect against DHCP exhaustion attacks, and option 82 settings are only configurable through the CLI.

upvoted 0 times

...

Buddy

2 months ago

I'm not sure about option B and D. Can someone explain why switch-controller-dhcp-snooping-verify-mac is used to protect against DHCP exhaustion attacks?

upvoted 0 times

...

Meghann

2 months ago

I agree with Gilma. Option C is also true because by default, all FortiSwitch ports forward client DHCP requests to untrusted ports.

upvoted 0 times

...

Gilma

2 months ago

I think option A is true because enabling DHCP snooping ensures requests and replies are seen by all DHCP servers.

upvoted 0 times

...