Which three statements about Dynamic ARP inspection on Cisco seithes are true?
(Choose three)

A.
The trusted database can be manually configured using the CLI

B.
Dynamic ARP inspection is supported only on access ports

C.
Dynamic ARP inspection does no perform ingress security checking

D.
DHCP snooping is used to dynamically build the trusted database

E.
Dynamic ARP inspection checks ARP packets against the trusted database

F.
Dynamic ARP inspection checks ARP packets on trusted and untrusted ports