nerdexam
Cisco

200-301 · Question #65

Refer to the exhibit. What is the effect of this configuration?

The correct answer is A. The switch port interface trust state becomes untrusted. Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-in-the-middle attacks. After enabling DAI, all

Submitted by eva_at· Mar 5, 2026Security Fundamentals

Question

Refer to the exhibit. What is the effect of this configuration?

Options

  • AThe switch port interface trust state becomes untrusted
  • BThe switch port remains administratively down until the interface is connected to another switch
  • CDynamic ARP inspection is disabled because the ARP ACL is missing
  • DThe switch port remains down until it is configured to trust or untrust incoming packets

How the community answered

(19 responses)
  • A
    74% (14)
  • B
    5% (1)
  • C
    16% (3)
  • D
    5% (1)

Explanation

Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-in-the-middle attacks. After enabling DAI, all ports become untrusted ports.

Topics

#Dynamic ARP Inspection#Switch port trust state#Layer 2 security

Community Discussion

No community discussion yet for this question.

Full 200-301 Practice