Company ABC wants to minimize the risk of users plugging unauthorized switches and hubs into the network. Which two features can be used on the LAN access ports to support this design requirement?…

Loop Guard protects against unidirectional link failures that could cause a blocked port to incorrectly transition to forwarding, but does not address unauthorized device connections on access ports.

PortFast bypasses STP listening and learning states on access ports and is the required companion configuration that enables BPDU Guard to function correctly on those ports.

DTF is not a recognized Cisco or IEEE spanning tree feature and plays no role in preventing unauthorized switch connectivity on access ports.

Root Guard prevents a connected switch from winning the STP root election but does not err-disable the port or otherwise block connectivity when an unauthorized switch is plugged in.

BPDU Guard places a port into err-disabled state the instant it receives a BPDU, which any connected switch would transmit, effectively preventing unauthorized switches from joining the network.