200-301 Question 229
Single answerA network administrator is configuring a switch to prevent potential Layer 2 issues caused by rogue devices or misconfigurations. The administrator wants to ensure that no unauthorized switches can form a bridge loop by sending BPDUs on specific ports. Which feature should the administrator enable on the ports connected to end devices?
- A
Root Guard
- B
Loop Guard
- C
BPDU Filter
- D
BPDU Guard
Show answer and explanation
Correct answer: D
Explanation
BPDU Guard is the correct feature to enable on ports connected to end devices to prevent unauthorized devices from sending BPDUs and potentially causing spanning tree issues. It shuts down the port if a BPDU is detected, ensuring that only end devices can connect to that port. This is particularly useful for protecting edge ports configured with PortFast.
- A. Incorrect.
Root Guard is used to prevent specific ports from becoming the root port in the Spanning Tree Protocol (STP) topology but does not protect against rogue devices sending BPDUs.
- B. Incorrect.
Loop Guard is designed to protect against loops by disabling ports that stop receiving BPDUs unexpectedly, but it does not prevent the sending of BPDUs.
- C. Incorrect.
BPDU Filter is used to block BPDUs from being sent or received, but it is not intended to protect against rogue devices. It disables Spanning Tree Protocol on the port, which could lead to loops.
- D. Correct.
BPDU Guard is specifically designed to shut down a port if it receives a BPDU, thus protecting the network from unauthorized devices or misconfigurations.