DHCP snooping is a great solution to prevent rogue DHCP servers on your network. Which security feature on switchers leverages the DHCP snooping database to help prevent man-in-the- middle attacks?

Spanning Tree Protocol prevents Layer 2 switching loops and does not use the DHCP snooping database or provide any protection against ARP-based man-in-the-middle attacks.

DAI intercepts ARP requests and replies on untrusted switch ports and validates each sender's IP-to-MAC mapping against the DHCP snooping binding table. Packets with invalid or spoofed ARP mappings are dropped, preventing an attacker from redirecting traffic through their machine to perform a man-in-the-middle attack.

Port security restricts which MAC addresses can communicate on a port but does not consult the DHCP snooping database to validate IP-to-MAC bindings carried inside ARP packets.

Layer 2 Attack Prevention Protocol (LAPP) is not a real or standardized networking security feature - it is a fictitious distractor.