The statement is incorrect because when DHCP snooping is enabled, by default, all switch ports are in an untrusted state. It requires manual configuration to designate which ports are trusted, typically those connected to legitimate DHCP servers. Trusting all ports by default would defeat the purpose of DHCP snooping, as it would allow unauthorized DHCP servers to assign IP addresses. It is, therefore, necessary to explicitly configure the ports connected to legitimate DHCP servers as trusted, which ensures that only these servers can respond to DHCP requests.