Dynamic ARP Inspection

C.

Dynamic ARP Inspection (DAI) is a security feature that can be implemented in Cisco network switches to mitigate man-in-the-middle (MitM) attacks on a network.

Man-in-the-middle (MitM) attacks occur when an attacker intercepts network traffic between two devices and modifies it in some way. In order to intercept traffic, the attacker needs to be able to redirect it to their own machine. This can be achieved through ARP spoofing, where the attacker sends fake ARP messages to associate their own MAC address with the IP address of the victim device. Once this is done, any traffic meant for the victim device will be sent to the attacker instead.

Dynamic ARP Inspection works by inspecting the ARP messages that are sent on a network and verifying that the MAC address and IP address mappings are legitimate. When enabled on a switch, DAI will intercept all ARP messages on untrusted ports and compare the source MAC address of the message with the MAC address of the device that sent the original DHCP request. If the MAC address in the ARP message matches the one in the DHCP request, the ARP message is forwarded; otherwise, it is dropped.

By doing this, DAI prevents ARP spoofing attacks by ensuring that the MAC address and IP address mappings are legitimate. This makes it more difficult for attackers to carry out MitM attacks on the network.

In summary, the correct answer to the question is C. Dynamic ARP Inspection is a security feature that mitigates man-in-the-middle attacks by preventing ARP spoofing. It is not designed to mitigate DDoS attacks, malware, or worms.