Which statement about IPv6 Neighbor Discovery (ND) inspection is true?

IPv6 Neighbor Discovery (ND) inspection is a security feature that protects against attacks targeting the ND protocol. It operates by snooping on ND messages to build and maintain a secure binding table. This table maps IPv6 addresses to their corresponding MAC addresses and the ingress interface. The key aspect is that ND inspection primarily focuses on stateless autoconfiguration (SLAAC) addresses, which are dynamically assigned without a DHCPv6 server. These bindings are stored in a Layer 2 neighbor table, similar to how ARP inspection works for IPv4, to prevent spoofing and other Layer 2 attacks. Stateful autoconfiguration addresses, typically assigned by DHCPv6, are generally handled by DHCPv6 snooping mechanisms, not ND inspection.