Which STP feature can prevent an attacker from becoming the root bridge by immediately shutting down the interface when it receives a BPDU?
A. PortFast
B. BPDU guard
C. BPDU filtering
D. root guard
Which STP feature can prevent an attacker from becoming the root bridge by immediately shutting down the interface when it receives a BPDU?
The port won’t be down using ROOT GUARD
I’m not sure, “If a root-guard-enabled port receives BPDUs that are superior to those that the current root bridge is sending, then that port is moved to a root-inconsistent state”, Whereas BPDU Guard moves it to a “shut down” state.
https://community.cisco.com/t5/switching/root-guard-vs-bpdu-guard/td-p/2072062
This should be Root Guard. Answer is D
BPDU Guard is the correct answer