Troubleshooting Cisco Data Center Infrastructure (DCIT) — Question 4

A client reports that many flaps and server cluster disconnects are occurring in its data center. While troubleshooting the issue, an engineer discovers that a network attack is hitting the Cisco Nexus 7000 Series Switches and that the source IP addresses are spoofed. Which first-line security solution resolves this issue?

Answer options

Correct answer: A

Explanation

Dynamic ARP Inspection is designed to prevent ARP spoofing and can effectively mitigate attacks involving spoofed IP addresses. Unicast RPF is used to prevent IP address spoofing but is not specifically aimed at ARP attacks. IP Source Guard provides another layer of protection but doesn't directly address ARP spoofing. Storm Control is useful for managing broadcast traffic but doesn't prevent IP spoofing attacks.