How does Dynamic ARP Inspection stop ARP poisoning?
DAI is a must-know CCNA security feature that blocks man-in-the-middle attacks cold. Drop your answer in the comments and see if you nailed it!
The question
Dynamic ARP Inspection validates ARP packets on untrusted ports against which database?
The answer
A DHCP snooping binding database
Right — DAI intercepts ARP packets and verifies the IP-to-MAC binding directly against the DHCP snooping table. Don't fall for B; the CAM table only maps MACs to switchports!
Exam tip
Read what the question is actually asking before looking at the options. The wrong answers here are ones candidates genuinely pick — each is true of something adjacent, just not of what was asked.