JNCIS-ENT: Juniper Networks Certified Specialist – Enterprise Routing and Switching (2024) — Question 48

Which two port security features use the DHCP snooping database for additional port security? (Choose two.)

Answer options

• A. dynamic ARP inspection
• B. MACsec
• C. IP Source Guard
• D. MAC learning

Correct answer: A, C

Explanation

The correct answers, dynamic ARP inspection and IP Source Guard, both leverage the DHCP snooping database to prevent attacks such as ARP spoofing and IP address conflicts. MACsec and MAC learning do not utilize the DHCP snooping database, as they serve different purposes in network security and management.