Implementing Cisco IP Routing (CCNP ROUTE, legacy) — Question 168

Which type of traffic does DHCP snooping drop?

Answer options

• A. discover messages
• B. DHCP messages where the source MAC and client MAC do not match
• C. traffic from a trusted DHCP server to client

Correct answer: D, H, C, P, M, A, C, M, A, C

Explanation

DHCP snooping is a security feature that only allows DHCP messages from trusted sources. It drops any DHCP messages that do not originate from these trusted ports, which includes messages with mismatched MAC addresses. Options A and C are incorrect because they describe valid messages that should not be dropped.