On which port should Dynamic ARP Inspection (DAI) be configured on a switch?
- access ports only
- any untrusted port
- an uplink port to another switch
- on any port where DHCP snooping is disabled
Explanation: DHCP snooping must be enabled on a port where DAI is configured, because DAI requires the DHCP snooping table to operate. Only a trusted interface, such as an uplink port between switches, is configured to implement DAI. All access ports are untrusted.
Exam with this question: CCNA 2 SRWEv7 Practice Final Exam Answers
Exam with this question: CCNA Security Final Exam Answers
Please login or Register to submit your answer