Networking-Annex D-Lesson 2-Notes Already Passed

-Validates ARP packets in a network -Intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings -This capability protects the network from some man-in-the-middle attacks -Determines the validity of an ARP packet based on valid IP-to-MAC address bindings stored in a trusted database, the DHCP snooping binding database {Ans: Dynamic ARP Inspection (DAI)}R1(config)# ip ssh authentication-retries 3 {Ans: Retry Count Command}Security feature that acts like a firewall between untrusted hosts and trusted DHCP servers. . Validates DHCP messages received from untrusted sources and filters out invalid messages. · Rate-limits DHCP traffic from trusted and untrusted sources. · Builds and maintains a binding database, which contains information about untrusted hosts with leased IP addresses. · Utilizes a binding database to validate subsequent requests from untrusted hosts. {Ans: DHCP Snooping}R1(config)# int g 0/1 R1(config-if)# no ip proxy-arp {Ans: Disable Proxy Address Resolution Protocol (ARP) Command}R1(config)# int g 0/1 R1(config-if)# no ip directed-broadcast {Ans: Disable IP Directed Broadcast Command}Response to a nonbroadcast packet that uses an unknown protocol known as Protocol Unreachable, or a response to a packet that a responding device failed to deliver because there is no known route to a destination. {Ans: Unreachable}