CCIE Routing and Switching (legacy) — Question 6

Which technology can be used to secure the edge of an STP domain?

Answer options

• A. BPDU guard
• B. BPDU filter
• C. UplinkFast
• D. root guard

Correct answer: D

Explanation

The correct answer is root guard, as it helps prevent a designated port from becoming a root port, thus securing the STP topology. BPDU guard and BPDU filter are protective mechanisms but do not specifically secure the edge of the STP domain. UplinkFast is used to speed up convergence but does not provide edge security.