Match each STP or switch protection feature to the problem it is mainly designed to prevent.

Technical deep dive

How to think about this question

Spanning Tree Protocol (STP) is essential for preventing Layer 2 loops in Ethernet networks by electing a root bridge and selectively blocking redundant paths. Cisco switches implement several STP-related protection features to enhance network stability and prevent common problems at the access layer. PortFast allows ports connected to end devices to bypass the usual STP listening and learning states, immediately transitioning to forwarding. This reduces host connection delays but risks loops if misapplied to switch-to-switch links. BPDU Guard complements PortFast by shutting down any PortFast-enabled port that receives a BPDU, which indicates a switch is connected where it shouldn't be. Root Guard protects the root bridge election process by blocking ports that receive superior BPDUs, preventing rogue switches from becoming the root bridge and destabilizing the topology. Loop Guard addresses a different issue: it prevents ports that should be blocking from transitioning to forwarding if BPDUs stop arriving, which can happen due to unidirectional link failures, thus avoiding Layer 2 loops. A common exam trap is confusing the purpose of these features or misapplying them. For example, enabling PortFast on switch-to-switch links can cause loops, and relying solely on BPDU Guard without Root Guard can allow rogue root bridges. Loop Guard is often overlooked but is critical in environments with unstable links. Understanding the distinct role each feature plays in STP protection helps avoid misconfiguration and ensures a stable, loop-free network topology in Cisco environments.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask