350-601 Security Practice Question
Exhibit
``` ip dhcp snooping ip dhcp snooping vlan 10,20 interface Ethernet1/1 ip dhcp snooping trust interface Ethernet1/2 ip dhcp snooping verify mac-address ```
Refer to the exhibit. A DHCP server is connected to Ethernet1/1 and a client in VLAN 10 is connected to Ethernet1/2. The client obtains an IP address. Which statement is best supported?
⚠ Common exam trap
Cisco often tests the misconception that a DHCP server must be in the same VLAN as the client, when in fact a trusted port or IP helper address allows cross-VLAN DHCP communication.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The DHCP server port is trusted for all VLANs
When a DHCP server is connected to a switch port and clients in different VLANs (like VLAN 10) obtain IP addresses, the switch must trust the DHCP server port for all VLANs. This is typically achieved by configuring the port as a DHCP snooping trusted port or by using an IP helper address on the VLAN interface. Without trust, DHCP snooping would drop server responses on untrusted ports, preventing the client from obtaining an address.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The DHCP server is in VLAN 20
Why it's wrong here
Not necessarily; the server could be in any VLAN that is snooped.
- ✗
The DHCP client is using a static IP address
Why it's wrong here
The client obtained an IP via DHCP, not static.
- ✓
The DHCP server port is trusted for all VLANs
Why this is correct
The 'ip dhcp snooping trust' command on the interface makes it trusted for all snooped VLANs.
- ✗
The DHCP client MAC address is not verified
Why it's wrong here
The verify mac-address is configured, so MAC verification is enabled.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-601 question from scratch — 984 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-601 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-601 exam.