View all questions & answers for the NSE 5 - FortiSwitch 7.6 Administrator Exam Materials exam

NSE 5 - FortiSwitch 7.6 Administrator Exam Materials - Question #56 Discussion

Comment Image Comment Image Comment Image

You enable Dynamic Host Configuration Protocol (DHCP) snooping on a VLAN and configure a FortiSwitch port as trusted for DHCP snooping. What additional step is required to configure the port as trusted for Dynamic ARP Inspection (DAI)? (Choose one answer)

  • A. Manually set the port as trusted for DAI through the CLI.
  • B. DAI implicitly trusts the port.
  • C. Enable IP Source Guard (IPSG) on the port.
  • D. Enable static MAC learning on the port.
Correct Answer: B

Brave-Dump Community Votes

Answer: B (2 votes) 100%

Community Explanations & Comments (2)

javaughn Bryan 10 months ago
Selected: B
B is correct.

You enable DAI on a VLAN and then configure a port as trusted or untrusted for DAI. DAI performs ARP inspection on ports that have been configured as untrusted for DAI and skips inspection on ports that have been configured as trusted in either DHCP snooping or DAI. DAI implicitly trusts ports configured as trusted in DHCP snooping.
javaughn Bryan 10 months ago
Selected: B
PAGE: 201 | FORTISWITCH 7.6 ADMIN GUIDE