Which two countermeasures can mitigate ARP spoofing attacks?

Which two countermeasures can mitigate ARP spoofing attacks? (Choose two.)

A.
port security

B.
DHCP snooping

C.
IP source guard

D.
dynamic ARP inspection