A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network. What are some things he can do to prevent it? Select the best answers.

Port security on switches allows administrators to limit the number of MAC addresses learned on a port or bind specific MAC addresses to a port, preventing unauthorized devices (including spoofed ones) from communicating.

Tools like ARPwatch continuously monitor ARP traffic for suspicious activity, such as changes in MAC-to-IP mappings, and alert administrators to potential ARP spoofing attempts.

While firewalls provide segmentation and control traffic at Layers 3 and 4, ARP spoofing is a Layer 2 attack that occurs within a local network segment, which a typical firewall does not directly prevent.

For small networks, configuring static ARP entries manually on devices prevents them from dynamically learning ARP information, thus making it significantly harder for an attacker to spoof ARP responses.

Using only static IP addresses does not prevent ARP spoofing; devices still need to resolve IP addresses to MAC addresses via ARP, making them vulnerable to ARP cache poisoning.