Acme Corporation wants to minimize the risk of users plugging unauthorized switches and hubs into the network. Which two features can be used on the LAN access ports to support this design requirement

BPDU Guard shuts down an access port the moment a BPDU is received, immediately detecting when an unauthorized switch or bridge has been plugged in and isolating it from the STP domain.

PortFast only accelerates STP port state transitions so end devices come online faster; it provides no mechanism to detect or block unauthorized switches or hubs.

Loop Guard protects against unidirectional link failures that could create STP forwarding loops by monitoring BPDU receipt; it has no capability to detect or block unauthorized device connections.

Port Security restricts the number of learned MAC addresses on a port, triggering a violation action when a hub or unmanaged switch introduces multiple source MAC addresses beyond the configured maximum.

UDLD detects physical-layer unidirectional link failures by monitoring echo replies between neighbors; it does not identify or restrict unauthorized switches or hubs connected to access ports.