What does the global configuration command ip arp inspection vlan 10-12, 15 accomplish?
A.
validates outgoing ARP requests for interfaces configured on VLAN 10, 11, 12, or 15
B.
intercepts all ARP requests and responses on trusted ports
C.
intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings
D.
discards ARP packets with invalid IP-to-MAC address bindings on trusted ports
Explanation:
The function of DAI is:
On untrusted ports, the switch captures all ARP packets (both request and reply) and then
validates the Source Protocol and Source Hardware address values against the snooping table
database for that port.
If the MAC address and IP address and the corresponding port do not match the snooping
database entry, the ARP packets are dropped. DAI thus prevents the node from specifying a nonlegitimate IP-MAC address binding which differs from what was given by the DHCP server.