Which three statements about Dynamic ARP Inspection are true? (Choose three.)
A.
It determines the validity of an ARP packet based on the valid MAC address-to-IP
address bindings stored in the DHCP snooping database.
B.
It forwards all ARP packets received on a trusted interface without any checks.
C.
It determines the validity of an ARP packet based on the valid MAC address-to-IP
address bindings stored in the CAM table.
D.
It forwards all ARP packets received on a trusted interface after verifying and inspecting
the packet against the Dynamic ARP Inspection table.
E.
It intercepts all ARP packets on untrusted ports.
F.
It is used to prevent against a DHCP snooping attack.
Explanation:
Reference:
http://www.cisco.com/en/US/products/hw/switches/ps5023/products_configuration_example
09186a00807c4101.shtml (background information, 3rd bulleted point)