Question 450
An access network requires prevention of forged source-IP traffic from endpoints with stolen static addresses. Which result would best establish that the correction succeeded?
Explanation
Correct Answer
This is an operational test of the required outcome rather than merely proof a setting exists. It checks that mAC-to-IP-to-port ownership is not enforced by ordinary VLAN isolation no longer prevents the service.
Incorrect Answers
This result may validate another network change, but it does not demonstrate recovery from the fault here: mAC-to-IP-to-port ownership is not enforced by ordinary VLAN isolation.
That explanation does not distinguish this option. “Traffic follows the moved server's new port and no stale static entry remains” is an alternative action, but it does not by itself establish the outcome required in this case.
That explanation does not distinguish this option. “The approved discovery application works through the relay while unrelated broadcasts remain separated” is an alternative action, but it does not by itself establish the outcome required in this case.