nerdexam
CiscoCisco

350-701 · Question #159

350-701 Question #159: Real Exam Question with Answer & Explanation

The correct answer is B: DHCP snooping has not been enabled on all VLANs.. i1.html#wp2458863701 the command "no ip arp inspection trust" means the port is not trusted in DAI. This means that it will inspect packets from the port for appropriate entries in the DHCP Snooping table. This is the k/configuration_guide/b_consolidated_config_guide_3850_chapter

Submitted by haruto_sh· Mar 30, 2026Network Security

Question

A network administrator configures Dynamic ARP Inspection on a switch. After Dynamic ARP Inspection is applied, all users on that switch are unable to communicate with any destination. The network administrator checks the interface status of all interfaces, and there is no err- disabled interface. What is causing this problem?

Options

  • AThe ip arp inspection limit command is applied on all interfaces and is blocking the
  • BDHCP snooping has not been enabled on all VLANs.
  • CThe no ip arp inspection trust command is applied on all user host interfaces
  • DDynamic ARP Inspection has not been enabled on all VLANs

Explanation

i1.html#wp2458863701 the command "no ip arp inspection trust" means the port is not trusted in DAI. This means that it will inspect packets from the port for appropriate entries in the DHCP Snooping table. This is the k/configuration_guide/b_consolidated_config_guide_3850_chapter_0110111.html err-disable on a port due to DAI comes from exceeding a rate limit.

Topics

#Dynamic ARP Inspection#DHCP Snooping#Switch security#Troubleshooting

Community Discussion

No community discussion yet for this question.

Full 350-701 PracticeBrowse All 350-701 Questions