On which port should Dynamic ARP Inspection (DAI) be configured on a switch?

IT Questions BankCategory: CCNAOn which port should Dynamic ARP Inspection (DAI) be configured on a switch?

On which port should Dynamic ARP Inspection (DAI) be configured on a switch?

  • access ports only
  • any untrusted port
  • an uplink port to another switch
  • on any port where DHCP snooping is disabled

Explanation: DHCP snooping must be enabled on a port where DAI is configured, because DAI requires the DHCP snooping table to operate. Only a trusted interface, such as an uplink port between switches, is configured to implement DAI. All access ports are untrusted.

Exam with this question: CCNA 2 SRWEv7 Practice Final Exam Answers
Exam with this question: CCNA Security Final Exam Answers

Subscribe
Notify of
guest

0 Comments
Inline Feedbacks
View all comments