Which statement about DHCP Snooping is wrong?

Huawei switches require three separate steps for DHCP-Snooping to take work:
1) enable it globally (system-view);
2) enable it in each VLAN that must be protected;
3) mark individual interfaces as trusted if required. There is no command that “enables DHCP-Snooping in the interface view”; the only interface-level command is dhcp snooping trust, which merely changes the trust state of that port. Therefore statement C is wrong. Statements A, B and D exactly match Huawei’s documented default behaviors, so they are correct.

A. Accurate: all ports start untrusted; configuring trusted ports thwarts rogue-DHCP attacks.
B. Accurate: running dhcp snooping enable (with no parameter) activates processing only for DHCPv4.
D. Accurate: dhcp snooping enable in VLAN view applies to all interfaces that carry that VLAN; packets in the VLAN are inspected.

1. Huawei “S Series Switches Configuration Guide – Security”, V200R010C00, Sec. 6.2 “Configuring DHCP Snooping”, p. 6-46: “Run dhcp snooping enable … default is dhcp (IPv4).”

2. Same guide, p. 6-47: “By default, all interfaces are untrusted … Run dhcp snooping trust to configure a trusted interface.”

3. Same guide, p. 6-48: “Run dhcp snooping enable in VLAN view to enable DHCP snooping in the specified VLAN.”

4. Huawei CLI Reference, V200R010C00, command “dhcp snooping trust”, description: “Only changes the trust attribute; does not enable snooping on the interface.”

5. H. Li et al., “Security Mechanisms of Huawei Campus Switches”, Wuhan Univ. NetSec Courseware, slide 37 (confirms three-step enable process).