Which Cisco solution helps prevent ARP spoofing and ARP poisoning attacks?
- Dynamic ARP Inspection
- IP Source Guard
- DHCP Snooping
- Port Security
Explanation: Dynamic ARP Inspection (DAI) is a security feature designed to mitigate ARP spoofing and ARP poisoning attacks. It works by intercepting all ARP requests and replies on untrusted ports and verifying each packet for a valid IP-to-MAC address binding. DAI relies on the DHCP snooping binding table to identify legitimate addresses, dropping and logging any invalid ARP messages to prevent a threat actor from poisoning the ARP caches of other devices on the network.
Related exam: CCNA 2 SRWEv7 Practice Final Exam Answers
Related exam: Switching, Routing, and Wireless Essentials ( Version 7.00) - SRWE Final Exam
Related exam: Network Security Final Exam Answers
