On which port should Dynamic ARP Inspection (DAI) be configured on a switch?
- access ports only
- any untrusted port
- an uplink port to another switch
- on any port where DHCP snooping is disabled
Explanation: DHCP snooping must be enabled on a port where DAI is configured, because DAI requires the DHCP snooping table to operate. Only a trusted interface, such as an uplink port between switches, is configured to implement DAI. All access ports are untrusted.
Related exam: CCNA 2 SRWEv7 Practice Final Exam Answers
Related exam: CCNA Security Final Exam Answers
