Which layer does IP source guard provide filtering to prevent a malicious host from impersonating the IP address of a legitimate host?

On which layer does IP source guard provide filtering to prevent a malicious host from impersonating the IP address of a legitimate host?
A. Layer 1
B. Layer 2
C. Layer 3
D. Layer 7