Which two statements about dynamic ARP inspection (DAI) are true? (Choose two.)

Your security department has identified an increase in IP spoofing attacks.
Which feature should you enable with DHCP snooping to prevent these attacks?

You are asked to ensure that an unauthorized switch running spanning tree cannot be added to
any edge port on your EX Series switch. The ports must discard any incoming spanning tree
packets but the interface must continue to forward traffic.
What should you do to accomplish the behavior?

— Exhibit —
{master:0}[edit]
user@switch# show firewall
family ethernet-switching {
filter block-traffic {
term count {
from {
source-address {
10.100.0.254/32;
}
then count blocked-subnet;
}
term reject-traffic {
from {
source-address {
10.100.0.254/32;
}
then discard;

}
term accept-rest {
then accept;
}
}
— Exhibit —
You have a device that is sending a malicious packet to other devices in your Layer 2 network.
You are asked to ensure that packets sent from this device are not allowed to enter your network.
You must also keep track of the number of packets that are being received. The device’s IP
address is 10.100.0.254. You have created and applied the firewall filter shown in the exhibit to the
correct port. However, traffic is still being forwarded into the network.
What is causing the problem?

Which two statements are true about firewall filters on an EX Series switch? (Choose two.)

In your network, you have configured an EX Series switch with port-based, VLAN-based, and
router-based firewall filters. The filters are applied to examine all outgoing traffic.
In which order will they be processed by the switch?

You are asked to inspect your EX Series switch for MAC limit violations.
Which two CLI commands would you use? (Choose two.)

You want to configure interface ge-0/0/3 to transition to an inconsistent role in the blocking state
when it receives a superior BPDU.

Which command would you use?

Interface ge-0/0/3 has been disabled because a storm control limit has been exceeded.
Which two commands are valid to recover the interface? (Choose two.)

You are implementing a Layer 3 VPN on a Junos device.
Which routing instance type would you use?