A network engineer is concerned about VLAN hopping happening on the network. Which of the following should the engineer do to address this concern?

The correct answer is D. Enable dynamic ARP inspection. Dynamic ARP inspection (DAI) is a security feature that can help to prevent VLAN hopping. DAI works by verifying that ARP responses are coming from the devices that they claim to be from. If an attacker sends an ARP response that is not from a legitimate device, DAI will drop the

Submitted by weili_xi· Mar 6, 2026Network Security

Question

Options

AConfigure private VLANs.
BChange the default VLAN.
CImplement ACLs on the VLAN.
DEnable dynamic ARP inspection.

How the community answered

(51 responses)

A
4% (2)
B
8% (4)
C
16% (8)
D
73% (37)

Explanation

Dynamic ARP inspection (DAI) is a security feature that can help to prevent VLAN hopping. DAI works by verifying that ARP responses are coming from the devices that they claim to be from. If an attacker sends an ARP response that is not from a legitimate device, DAI will drop the

Community Discussion

No community discussion yet for this question.

Full N10-009 Practice