A network administrator is evaluating network security in the aftermath of an attempted ARP spoofing attack. If Port-channel1 is the uplink interface of the access-layer switch toward the distribution

While `ip dhcp snooping vlan 1-4094` enables DHCP snooping on specific VLANs, the feature must first be enabled globally using the `ip dhcp snooping` command to be fully active and effective.

The `ip dhcp snooping` command globally enables the DHCP snooping feature on the switch, which is essential for building and maintaining a binding table of trusted IP-MAC addresses used by Dynamic ARP Inspection (DAI) to validate ARP packets.

This choice is a duplicate of option B and while technically correct in its function, only two unique configurations are required for the solution.

The `ip arp inspection trust` command configures a specific interface as trusted for DAI, which is crucial for uplinks but does not enable the core DAI functionality on client VLANs that directly protects against spoofing attempts.

The `ip arp inspection vlan 1-4094` command enables Dynamic ARP Inspection (DAI) across all VLANs, instructing the switch to validate incoming ARP packets against the DHCP snooping binding table, thereby directly mitigating ARP spoofing attacks.