An attacker sends forged DHCP offers from an access port. Which control identifies permitted DHCP server-facing ports?

1. A lower switch bridge priority
2. A longer DHCP lease duration
3. PortFast on all uplinks
4. DHCP snooping trust configuration