On which port should Dynamic ARP Inspection (DAI) be configured on a switch?
- an uplink port to another switch
- any untrusted port
- access ports only
- on any port where DHCP snooping is disabled
Answers Explanation & Hints: DHCP snooping must be enabled on a port where DAI is configured, because DAI requires the DHCP snooping table to operate. Only a trusted interface, such as an uplink port between switches, is configured to implement DAI. All access ports are untrusted.