200-301: Cisco Certified Network AssociateDemo

By Cisco · Question Mode

QuestionQ850

Security Fundamentals

Question Image

Refer to the exhibit. What is the effect of this configuration?

  • A The switch port remains administratively down until the interface is connected to another switch.
  • B Dynamic ARP Inspection is disabled because the ARP ACL is missing.
  • C The switch port interface trust state becomes untrusted.
  • D The switch port remains down until it is configured to trust or untrust incoming packets.
Explanation

Enabling ip arp inspection vlan 2 turns on Dynamic ARP Inspection for VLAN 2. Because FastEthernet0/1 is an access port in VLAN 2 and no ip arp inspection trust command is applied, the port remains in the default untrusted state for DAI. Untrusted ports have ARP packets inspected, while trusted ports bypass those checks.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!