1: You can achieve this by using DHCP server authorization. In this way, only authorized DHCP servers will be allowed on your network. This can be configured in Active Directory to prevent rogue DHCP servers. 2: Enable DHCP snooping on managed switches. This will prevent DHCP-related attacks, such as rogue DHCP servers or IP spoofing. 4: Implement segmentation by using VLANs to segment your network and restrict DHCP traffic to authorized segments only. 5: Frequently update and apply patches to your DHCP servers. This will mitigate known vulnerabilities.