Cisco CCNA 200-301 Practice Question

Enabling BPDU guard on access ports is the correct approach. BPDU guard will disable a port if it receives any Bridge Protocol Data Units (BPDUs), which helps in preventing unauthorized switches from causing topology changes. This is particularly important on access ports connected to end devices, where BPDUs should not be received.

• PortFast is a feature that allows ports to enter the forwarding state immediately, but it does not disable the port if BPDUs are received.
• Loop guard is used to prevent network loops by monitoring the absence of BPDUs on non-designated ports, but it does not disable the port upon receiving BPDUs.
• Root guard prevents a port from becoming a root port by ignoring superior BPDUs received on that port, but it does not disable the port when BPDUs are received on an access port.

Therefore, BPDU guard is the most appropriate feature to protect the network in this scenario.