A township board finds a contractor’s rogue DHCP appliance answering on an access port. What DHCP snooping trust model stops offers from that port while allowing the real server path?
Select an answer to reveal the explanation.
Short Explanation
Untrusted access ports are ‘client only’—rogue DHCP offers get dropped. Trusted uplinks are where the real DHCP server or relay lives. Flip that and you’ve invited the contractor’s box to hand out addresses.
Full Explanation
DHCP snooping builds a binding table from legitimate DHCP transactions and drops DHCP server messages on untrusted ports. Access ports should be untrusted; uplinks toward valid DHCP servers or relays should be trusted. Inverting trust, disabling snooping, or substituting static host routes fails to block rogue DHCP on access ports.