A Layer 2 loop was created on the LAN when an end user connected several hosts to the LAN by using a hub. Which control method does an engineer use to limit the number of connected hosts allowed on…

BPDU guard disables a port upon receipt of a BPDU, protecting against unauthorized switches being connected - it does not limit the number of end hosts.

BPDU filter suppresses BPDU transmission and reception on a port and has no mechanism for counting or limiting connected host MAC addresses.

Loop guard prevents a non-designated port from becoming a designated port when BPDUs stop arriving, protecting against unidirectional link failures rather than controlling host counts.

Port security enforces a maximum MAC address count on a switch port using the 'switchport port-security maximum' command, allowing only a configured number of distinct hosts to become active at any time. When a hub connects multiple hosts, each host's MAC address appears on the upstream switch port - port security counts and limits these MACs. If the limit is exceeded, the port can be configured to shut down, restrict, or protect, preventing unauthorized additional hosts from gaining access.