What does the ARP table verification ensure?

• A. It lists all devices including unauthorized
• B. That all authorized and no unauthorized devices are indicated in the table.
• C. It is used only for management IPs
• D. It is not relevant to security

Answer: (B)

ARP table verification focuses on validating the mappings in the ARP cache so they reflect devices that are actually allowed on the network. When this verification is in place, the network can ensure that every IP-to-MAC entry corresponds to an authorized device and that there are no entries introduced by unauthorized or rogue devices. This helps prevent ARP spoofing and man-in-the-middle attacks, because the system checks that the information in the ARP table matches trusted sources (often tying ARP entries to DHCP snooping bindings or ARP inspection). So the goal is to have the ARP table accurately represent only authorized devices, with no stray or spoofed entries.

Choices that suggest listing every device including unauthorized, restricting the scope to management IPs, or claiming ARP verification isn’t related to security don’t fit because ARP verification is specifically about confirming legitimate IP-to-MAC mappings and guarding against unauthorized entries.