Which type of attack is mitigated by Dynamic ARP Inspection (DAI)?

Dynamic ARP Inspection (DAI) protects against ARP spoofing, a common technique used in Man-in-the-middle (MitM) attacks. DAI validates ARP packets against trusted sources (like DHCP snooping bindings) to ensure that the MAC address and IP address mappings are legitimate. If an ARP packet contains invalid information, DAI drops it, preventing attackers from redirecting traffic. DDoS attacks overwhelm resources, malware is malicious software, and worms are self-replicating malware; none of these are directly mitigated by DAI, which specifically targets ARP-based vulnerabilities.