Which function is provided by DHCP snooping on a switch?
Choose an answer
Tap an option to check your answer.
Correct answer: rate-limits certain traffic.
Why this is the answer
DHCP snooping is a security feature that filters untrusted DHCP messages and builds a binding table. While its primary role is to prevent rogue DHCP servers and enforce DHCP integrity, a secondary function, often used in conjunction with DHCP snooping, is the ability to rate-limit DHCP traffic from untrusted ports. This prevents denial-of-service attacks where an attacker floods the DHCP server with requests. The other options are incorrect: Listening to multicast traffic for packet forwarding is a function of IGMP snooping. Propagating VLAN information between switches is done by protocols like VTP (VLAN Trunking Protocol). Providing DDoS mitigation is a broader security function typically handled by specialized devices or more advanced security features, not solely by DHCP snooping.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed