300-420 · Question #93
An architect is designing a network that will utilize the spanning tree protocol to ensure a loop- free topology. The network will support an engineering environment where it is necessary for end…
The correct answer is D. root guard. To prevent unauthorized switches connected by end-users from becoming the root bridge and affecting the spanning tree topology, the root guard feature should be included.
Question
An architect is designing a network that will utilize the spanning tree protocol to ensure a loop- free topology. The network will support an engineering environment where it is necessary for end users to connect their own network switches for testing purposes. Which feature should the architect include in the design to ensure the spanning tree topology is not affected by these rogue switches?
Options
- ABPDU Skew Detection
- BBPDU guard
- Cloop guard
- Droot guard
How the community answered
(38 responses)- A3% (1)
- B8% (3)
- C5% (2)
- D84% (32)
Why each option
To prevent unauthorized switches connected by end-users from becoming the root bridge and affecting the spanning tree topology, the root guard feature should be included.
BPDU Skew Detection is a feature used to detect BPDU transmission delays and inconsistencies, not to prevent unauthorized switches from becoming root.
BPDU guard immediately err-disables a port if it receives any BPDU, which would prevent legitimate user switches from connecting for testing purposes, as they would send BPDUs.
Loop guard is used to prevent alternate or root ports from transitioning into a forwarding state if BPDUs are no longer received, typically protecting against unidirectional link failures, not rogue root bridges.
Root guard is a Spanning Tree Protocol (STP) feature that prevents a port from becoming a root port if it receives superior BPDUs from a connected device, thereby ensuring that the switch connected to an end-user port cannot become the root bridge and disrupt the designed STP topology.
Concept tested: Spanning Tree Protocol-Root Guard
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750/software/release/12-2_44_se/configuration/guide/scg/swstp.html
Topics
Community Discussion
No community discussion yet for this question.