A rogue device has connected to the network and has become the STP root bridge, which has caused
a network availability issue.
Which two commands can protect against this problem? (Choose two.)
A.
switch(config)#spanning-tree portfast bpduguard default
B.
switch(config)#spanning-tree portfast bpdufilter default
C.
switch(config-if)#spanning-tree portfast
D.
switch(config-if)#spanning-tree portfast disable
E.
switch(config-if)#switchport port-security violation protect
F.
switch(config-if)#spanning-tree port-priority 0
The BPDU guard feature can be globally enabled on the switch or can be enabled per port, but the feature operates with some differences.
At the global level, you enable BPDU guard on Port Fast-enabled ports by using the spanning-tree portfast bpduguard default global configuration command. Spanning tree shuts down ports that are in a Port Fast-operational state if any BPDU is received on them. In a valid configuration, Port Fast-enabled ports do not receive BPDUs. Receiving a BPDU on a Port Fast-enabled port means an invalid configuration, such as the connection of an unauthorized device, and the BPDU guard feature puts the port in the error-disabled state. When this happens, the switch shuts down the entire port on which the violation occurred.
1
0