Cisco
200-301 · Question #65
Refer to the exhibit. What is the effect of this configuration?
The correct answer is A. The switch port interface trust state becomes untrusted. Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-in-the-middle attacks. After enabling DAI, all
Submitted by eva_at· Mar 5, 2026Security Fundamentals
Question
Refer to the exhibit. What is the effect of this configuration?
Options
- AThe switch port interface trust state becomes untrusted
- BThe switch port remains administratively down until the interface is connected to another switch
- CDynamic ARP inspection is disabled because the ARP ACL is missing
- DThe switch port remains down until it is configured to trust or untrust incoming packets
How the community answered
(19 responses)- A74% (14)
- B5% (1)
- C16% (3)
- D5% (1)
Explanation
Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-in-the-middle attacks. After enabling DAI, all ports become untrusted ports.
Topics
#Dynamic ARP Inspection#Switch port trust state#Layer 2 security
Community Discussion
No community discussion yet for this question.