200-301 · Security Fundamentals

Configure Layer 2 security features

Objective 5.7 · Configure Layer 2 security features.

4 learning blocksNext: about 6 minutes4 key conceptsPreview · not independently reviewed
ProgressNot started0/4 blocks learned and checked
Learn

Continue your lesson

Tie every forwarding decision to interface state, Layer 2 state, addressing, routing, and policy.

0/4blocks complete
Block 1 of 4

Understand DHCP snooping

Current · 6 min
Learn with your providerWatch here or open a provider lesson below. Come back to try four related questions.
1
Watch hereObjective 5.7 section · DHCP snooping (0:00–5:19)
Jeremy's IT Lab
Optional concept notes

DHCP snooping

Builds trusted address bindings while blocking unauthorized DHCP server replies.

Your sessionabout 6 minutes

Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.

Block 2 of 4

Understand Dynamic ARP inspection

14 min
1
Watch hereObjective 5.7 section · Dynamic ARP Inspection (5:35–19:12)
Jeremy's IT Lab
Optional concept notes

Dynamic ARP inspection

Validates ARP messages against trusted address binding information.

Your sessionabout 14 minutes

Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.

Block 3 of 4

Understand Port security

8 min
1
Watch hereObjective 5.7 section · Switchport port security (1:22–9:14)
Jeremy's IT Lab
Optional concept notes

Port security

Limits learned source MAC addresses on a switch access port.

Cross-certificationCCNA ↔ Net+

Port security

The core idea stays the same. The surrounding objective changes the evidence, decision, or task the exam asks for.

Your sessionabout 8 minutes

Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.

Block 4 of 4

Understand BPDU Guard

13 min
1
Watch hereObjective 5.7 section · BPDU Guard (1:18–13:56)
Jeremy's IT Lab
Optional concept notes

BPDU Guard

Error-disables a PortFast edge port if it receives a spanning-tree BPDU.

Your sessionabout 13 minutes

Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.

No setup required

Practice the reasoning here

Write or inspect a small Cisco configuration, name the expected show-command evidence, and explain how a frame or packet crosses it.

  1. State the expected result before changing or testing anything.
  2. Name the observation, command, log, or report that would confirm it.
  3. Explain why the closest alternative does not fit the same requirement.
Your next milestone

Check the whole objective

This unlocks objective 5.7 for recall. The latest checkpoint needs 70% or higher; a lower result puts the lesson back near the front of your timeline.

One lesson at a time.Your block checks prepare you for this milestone. A score of 70% or higher advances the course; finishing a practice session completes your daily goal.
Official blueprint references
Official 200-301 CCNA exam overviewCisco ↗Official CCNA 200-301 v1.1 exam topicsCisco ↗Official CCNA 200-301 v2.0 announcementCisco ↗