ExamQuestions.com

Register
Login
CCIE Security Written Exam (400-251) Exam Questions

Cisco

CCIE Security Written Exam (400-251)

414 / 530

Question 414:

Which three statements about Dynamic ARP Inspection on Cisco Switches are true? (Choose three.) 

Answer options:

A. Dynamic ARP inspection checks ARP packets on both trusted and untrusted ports.
B. Dynamic ARP inspection is only supported on access ports.
C. Dynamic ARP inspection checks ARP packets against the trusted database.
D. The trusted database can be manually configured using the CLI.
E. Dynamic ARP inspection does not perform ingress security checking.
F. DHCP snooping is used to dynamically build the trusted database.