nerdexam
CiscoCisco

200-301 · Question #90

200-301 Question #90: Real Exam Question with Answer & Explanation

The correct answer is D: The switch discard all ingress ARP traffic with invalid MAC-to-IP address bindings.. Dynamic ARP inspection is an ingress security feature; it does not perform any egress checking.

Submitted by kwame.gh· Mar 5, 2026Network Access

Question

Refer to the exhibit. What is the effect of this configuration?

Options

  • AAll ARP packets are dropped by the switch
  • BEgress traffic is passed only if the destination is a DHCP server.
  • CAll ingress and egress traffic is dropped because the interface is untrusted
  • DThe switch discard all ingress ARP traffic with invalid MAC-to-IP address bindings.

Explanation

Dynamic ARP inspection is an ingress security feature; it does not perform any egress checking.

Topics

#ARP inspection#Layer 2 security#IP-MAC binding

Community Discussion

No community discussion yet for this question.

Full 200-301 PracticeBrowse All 200-301 Questions