Fortinet Exam NSE6_FSW-7.2 Topic 5 Question 19 Discussion

Actual exam question for Fortinet's NSE6_FSW-7.2 exam

Question #: 19
Topic #: 5

Which two statements about DHCP snooping enabled on a FortiSwitch VLAN are true? (Choose two.)

AEnabling DHCP snooping on a FortiSwitch VLAN ensures requests and replies are seen by all DHCP servers.

Bswitch-controller-dhcp-snooping-verify-mac verifies the destination MAC address to protect against DHCP exhaustion attacks.

CBy default, all FortiSwitch ports are set to forward client DHCP requests to untrusted ports.

DSettings related to DHCP option 82 are only configurable through the CLI

Show Suggested Answer

Suggested Answer: D

by Roselle at Sep 18, 2024, 11:13 AM

Limited Time Offer

25%

Off

Get Premium NSE6_FSW-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jamey

10 days ago

A is incorrect. DHCP snooping only inspects DHCP traffic on the local VLAN, not all DHCP servers. But I like the idea of a 'DHCP eavesdropping' mode!

upvoted 0 times

...

Geoffrey

11 days ago

B and D are correct. DHCP snooping helps protect against DHCP exhaustion attacks, and option 82 settings are only configurable through the CLI.

upvoted 0 times

...

Buddy

13 days ago

I'm not sure about option B and D. Can someone explain why switch-controller-dhcp-snooping-verify-mac is used to protect against DHCP exhaustion attacks?

upvoted 0 times

...

Meghann

15 days ago

I agree with Gilma. Option C is also true because by default, all FortiSwitch ports forward client DHCP requests to untrusted ports.

upvoted 0 times

...

Gilma

23 days ago

I think option A is true because enabling DHCP snooping ensures requests and replies are seen by all DHCP servers.

upvoted 0 times

...