nerdexam
Cisco

200-301 · Question #271

Which type of attack can be mitigated by dynamic ARP inspection?

The correct answer is D. man-in-the-middle. Dynamic ARP Inspection (DAI) mitigates man-in-the-middle attacks that exploit Address Resolution Protocol (ARP) by validating ARP packets to ensure IP-to-MAC address bindings are legitimate.

Submitted by andres_qro· Mar 5, 2026Security Fundamentals

Question

Which type of attack can be mitigated by dynamic ARP inspection?

Options

  • Aworm
  • Bmalware
  • CDDoS
  • Dman-in-the-middle

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    9% (3)
  • D
    86% (30)

Why each option

Dynamic ARP Inspection (DAI) mitigates man-in-the-middle attacks that exploit Address Resolution Protocol (ARP) by validating ARP packets to ensure IP-to-MAC address bindings are legitimate.

Aworm

Worms are self-propagating malicious software that exploits vulnerabilities to spread across networks; DAI does not directly mitigate worm propagation.

Bmalware

Malware is a broad category of malicious software; while DAI helps secure network communication, it is not a general malware prevention tool.

CDDoS

Distributed Denial of Service (DDoS) attacks overwhelm a target with traffic from multiple sources; DAI is not designed to prevent or mitigate DDoS attacks.

Dman-in-the-middleCorrect

Dynamic ARP Inspection (DAI) prevents ARP spoofing, a common form of man-in-the-middle (MITM) attack, by intercepting, validating, and dropping ARP packets with invalid IP-to-MAC address bindings.

Concept tested: Dynamic ARP Inspection mitigation

Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_55_se/configuration/guide/3560scg/swdhcp82.html#wp1097615

Topics

#dynamic ARP inspection#ARP spoofing#man-in-the-middle#Layer 2 security

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice