200-301: Cisco Certified Network AssociateDemo

DHCP snooping blocks untrusted DHCP server responses and builds the binding table used for client validation, so it addresses rogue DHCP servers that hand out spoofed IP configuration. Dynamic ARP Inspection checks ARP packets against trusted bindings, which prevents ARP cache-poisoning attacks. Storm control rate-limits excessive Layer 2 traffic such as broadcast, multicast, or unknown unicast bursts, which mitigates flood attacks. IP Source Guard filters traffic based on valid source IP/MAC bindings on a port, which helps stop rogue or spoofing clients from using unauthorized addresses.