Which three statements about Dynamic ARP Inspection are true? (Choose three.)

A.
It determines the validity of an ARP packet based on the valid MAC address-to-IP address
bindings stored in the DHCP snooping database.

B.
It forwards all ARP packets received on a trusted interface without any checks.

C.
It determines the validity of an ARP packet based on the valid MAC address-to-IP address
bindings stored in the CAM table.

D.
It forwards all ARP packets received on a trusted interface after verifying and inspecting the
packet against the Dynamic ARP Inspection table.

E.
It intercepts all ARP packets on untrusted ports.

F.
It is used to prevent against a DHCP snooping attack.

Explanation:
Reference:
http://www.cisco.com/en/US/products/hw/switches/ps5023/products_configuration_example09186
a00807c4101.shtml (background information, 3rd bulleted point)