A malicious user gained network access by spoofing printer connections that were authorized using MAB on four different switch ports at the same time. What two catalyst switch security features will p

DHCP Snooping prevents unauthorized DHCP servers and ensures that valid IP-to-MAC address bindings are maintained in the DHCP snooping binding table, which is crucial for Dynamic ARP Inspection.

802.1AE MacSec provides point-to-point encryption for Ethernet frames, which secures data in transit but does not directly prevent a user from spoofing a printer connection for network access at Layer 2 or 3.

Port security limits the number of MAC addresses allowed on a port and can restrict specific MAC addresses, but DHCP Snooping and DAI specifically address the spoofing of IP and MAC addresses to gain access.

IP Device Tracking helps track devices on the network, but it does not actively prevent spoofing or unauthorized access in the same way DHCP Snooping and DAI do by validating ARP and DHCP traffic.

Dynamic ARP Inspection (DAI) validates ARP packets against the DHCP snooping binding table, dropping invalid ARP packets to prevent ARP spoofing and Man-in-the-Middle attacks from unauthorized devices.

Private VLANs isolate ports within a VLAN at Layer 2, which helps segment traffic and contain threats, but it does not directly prevent a malicious user from spoofing an authorized device to gain initial access.