| Exam 300-115 | Question id=1429 | Infrastructure Security |
Which database is used to determine the validity of an ARP packet based on a valid IP-to-MAC address binding?
| A. |
DHCP snooping database | |
| B. |
dynamic ARP database | |
| C. |
dynamic routing database | |
| D. |
static ARP database |
Information About Dynamic ARP Inspection
DAI is used to validate ARP requests and responses as follows:
* Intercepts all ARP requests and responses on untrusted ports.
* Verifies that a packet has a valid IP-to-MAC address binding before updating the ARP cache or forwarding the packet.
* Drops invalid ARP packets.
DAI can determine the validity of an ARP packet based on valid IP-to-MAC address bindings stored in a DHCP snooping binding database.
This database is built by DHCP snooping when it is enabled on the VLANs and on the device. It may also contain static entries that you have created.