Implementing Cisco IP Switched Networks (CCNP SWITCH, legacy) — Question 63

When IP Source Guard with source IP filtering is enabled on an interface, which feature must be enabled on the access VLAN for that interface?

Answer options

• A. DHCP snooping
• B. storm control
• C. spanning-tree portfast
• D. private VLAN

Correct answer:

Explanation

The correct answer is A. DHCP snooping must be enabled to provide a trusted mechanism for validating IP addresses and prevent spoofing. The other options, while useful in different contexts, do not directly relate to the requirements for IP Source Guard to function properly.