Dynamic ARP Protection (DAP) is a security feature used to intercept and validate ARP packets in a network to prevent " man-in-the-middle " attacks like ARP spoofing.
Validation Source: For the switch to know if an ARP packet is legitimate, it must check the sender ' s IP and MAC address against a trusted database.
Dynamic vs. Static: * In most modern environments, the switch builds this database automatically by using DHCP Snooping. When a client gets an IP from a DHCP server, the switch records the binding.
Static Environments (The Solution): If you have servers or devices with static IP addresses (no DHCP server), DHCP snooping will have no record of them. To prevent these legitimate devices from being blocked by ARP protection, you must manually configure Static IP-to-MAC bindings.
Why Option D is Correct: It correctly identifies that the feature is flexible enough to support non-DHCP environments through manual configuration.
Why others are incorrect: * Option A: While highly recommended, a DHCP server is not strictly required because of the static binding fallback.
Option C: Simply enabling the features isn ' t enough; you must also consider untrusted vs. trusted ports. Furthermore, " full information " is a bit of an overstatement, as static devices still need manual intervention.
Submit