a switch implements both dhcp snooping as well as dynamic arp inspection (dai) using arp acls. dhcp snooping reacted when host a leased an address with dhcp so that the switch now has a valid binding table entry for host a. however, the configured arp acl rule denies host a's mac address. what happens when host a sends arp messages that need to pass through the switch?