What is the effect of entering the ip arp inspection vlan 10 configuration command on a switch?
- It specifies the maximum number of L2 addresses allowed on a port.
- It enables DAI on specific switch interfaces previously configured with DHCP snooping.
- It enables DHCP snooping globally on a switch.
- It globally enables BPDU guard on all PortFast-enabled ports.
Explanation: The ip arp inspection vlan 10 global configuration command is used to enable Dynamic ARP Inspection (DAI) for the specified VLAN. DAI is a security feature that helps prevent ARP spoofing by intercepting ARP packets on untrusted ports and validating them against a DHCP snooping binding table; therefore, DHCP snooping must be enabled on the VLAN and trusted interfaces before DAI can operate.
Related exam: CCNA 2 Final Exam Answers
