On the network shown in the figure, the network administrator configures the DHCP snooping trust...

Comprehensive and Detailed In-Depth Explanation:

1. Understanding DHCP Snooping

DHCP Snooping is a security feature that filters untrusted DHCP messages to prevent attacks such as:

Rogue DHCP servers distributing incorrect IP addresses.

DHCP starvation attacks.

In DHCP Snooping, switch ports are classified as:

Trusted Interfaces: Allow both DHCP requests and DHCP responses to pass through.

Untrusted Interfaces: Allow only DHCP requests but drop DHCP responses (to prevent rogue DHCP servers).

2. Analyzing Each Answer Option

Option A: "When receiving a DHCP response packet on GE0/0/2, the switch forwards the packet through GE0/0/1."

Correct.

GE0/0/2 is a trusted interface (connected to the DHCP server).

DHCP responses (ACK, NAK, OFFER) come from the DHCP Server.

Since DHCP responses are allowed on trusted interfaces, the switch forwards them to the client (PC1) via GE0/0/1.

Option B: "When receiving a DHCP request packet on GE0/0/2, the switch forwards the packet through GE0/0/3."

Incorrect.

DHCP requests originate from clients (PC1, attackers, etc.), not from the DHCP server.

The DHCP request should be forwarded to the DHCP server via a trusted interface (not GE0/0/3, which is untrusted).

Option C: "When receiving a DHCP response packet on GE0/0/3, the switch forwards the packet through GE0/0/1."

Incorrect.

GE0/0/3 is an untrusted interface (connected to the attacker).

DHCP responses (ACK, OFFER) from untrusted interfaces are dropped to prevent rogue DHCP attacks.

The switch will not forward the packet.

Option D: "When receiving a DHCP request packet on GE0/0/3, the switch forwards the packet through GE0/0/2."

Correct.

DHCP requests originate from clients (PC1 or attacker).

Since DHCP requests are allowed on untrusted interfaces, the switch forwards them to the DHCP server via the trusted interface (GE0/0/2).

Final Answer:

✅ A and D are correct.

HCIP-Datacom-Advanced Routing & Switching Technology References:

DHCP Snooping and Port Trust Classification

How Trusted and Untrusted Ports Handle DHCP Packets

Preventing Rogue DHCP Servers Using DHCP Snooping