What is the main benefit of DHCP snooping on a network?

• A. To assign IP addresses to clients automatically.
• B. To log all DHCP transactions.
• C. To provide dynamic DNS updates.
• D. To prevent rogue DHCP servers on the network.

Answer: (D)

DHCP snooping protects DHCP by ensuring that only responses from authorized DHCP servers are used to configure clients. The switch builds a binding table that ties each client’s MAC address to its IP address, lease time, and the port through which the client is connected. With this in place, the switch can validate DHCP messages: offers and acks from untrusted ports (or from unknown servers) are dropped, preventing rogue DHCP servers from handing out IP configurations. This stops misconfigurations, IP conflicts, and potential man-in-the-middle attacks on the network. The other options aren’t the primary purpose: assigning IPs is the job of a DHCP server, not the security feature; logging can happen but isn’t the core benefit; and dynamic DNS updates are separate.