200-301 Question 227
Single answerA network administrator is configuring a switch to prevent potential topology loops caused by misconfigurations or rogue devices sending Bridge Protocol Data Units (BPDUs). Which feature should be enabled on access ports to immediately shut down the port if a BPDU is received?
- A
Root Guard
- B
Loop Guard
- C
BPDU Filter
- D
BPDU Guard
Show answer and explanation
Correct answer: D
Explanation
BPDU Guard is the appropriate feature to use on access ports to enhance network security by automatically shutting down the port if a BPDU is received. This prevents unauthorized devices from affecting the spanning tree topology and causing potential loops or disruptions.
- A. Incorrect.
Root Guard is used to protect the root bridge by preventing a designated port from becoming a root port; it does not address rogue BPDUs on access ports.
- B. Incorrect.
Loop Guard is designed to prevent loops by disabling ports that stop receiving BPDUs, but it is not intended to shut down a port when a BPDU is received.
- C. Incorrect.
BPDU Filter is used to suppress the sending or processing of BPDUs but does not shut down the port upon receiving a BPDU.
- D. Correct.
BPDU Guard is specifically designed to shut down an access port immediately if it receives a BPDU, thereby preventing rogue or misconfigured devices from participating in the spanning tree topology.