Your design client has requested that you ensure that the client devices are not dynamically configured with incorrect DNS information. When finalizing the network design, which security option must…

IGMP snooping manages multicast group membership traffic and has no function related to DHCP or DNS address assignment.

DHCP snooping is a Layer 2 security feature configured on switches that designates ports as trusted or untrusted. Untrusted ports drop DHCP server responses, preventing rogue DHCP servers from distributing incorrect DNS server addresses or gateway information to clients. This directly addresses the requirement to protect clients from receiving incorrect DNS configuration.

Root guard is a Spanning Tree Protocol feature that prevents unauthorized switches from becoming the root bridge, and does not interact with DHCP or DNS.

DNS snooping is not a defined or standard switch security feature; it does not exist as a configurable option on network switches.