Which three statements about Dynamic ARP Inspection are true? (Choose three.)
A.
It determines the validity of an ARP packet based on the valid MAC address-to-IP address
bindings stored in the DHCP snooping database.
B.
It forwards all ARP packets received on a trusted interface without any checks.
C.
It determines the validity of an ARP packet based on the valid MAC address-to-IP address
bindings stored in the CAM table.
D.
It forwards all ARP packets received on a trusted interface after verifying and inspecting the
packet against the Dynamic ARP Inspection table.
E.
It intercepts all ARP packets on untrusted ports.
F.
It is used to prevent against a DHCP snooping attack.
Explanation:
Reference:
http://www.cisco.com/en/US/products/hw/switches/ps5023/products_configuration_example09186
a00807c4101.shtml (background information, 3rd bulleted point)