A school district needs to block ARP poisoning between kiosk VLAN hosts. Which feature validates ARP against the DHCP snooping database?
Select an answer to reveal the explanation.
Short Explanation
DAI is the ARP fact-checker—it compares who claims an IP in an ARP message against DHCP snooping’s binding book. Poisoned replies that don’t match get dropped.
Full Explanation
Dynamic ARP Inspection intercepts ARP and validates sender bindings against the DHCP snooping database (plus any static ARP ACLs), mitigating ARP spoofing on the VLAN. CoPP, VTP pruning, and SVI uRPF without DAI do not provide that ARP-binding validation model.