Disclaimer:
Educational Use Only:
The website links provided are to be used strictly for educational and knowledge-gaining purposes only.
No Misuse:
Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.
Respect for Websites and Businesses:
Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.
Acknowledge Value of Knowledge:
Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.
No Endorsement:
The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.
User Responsibility:
By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.
- What does BPDU stand for?
a. Bridge Protocol Data Unit
b. Backup Port Detection Utility
c. Blocking Port Data Unit
d. Bridge Port Delay Utility
Answer: a. Bridge Protocol Data Unit
networkacademy+2 - Which primary protocol uses BPDU in network switches?
a. ARP
b. Spanning Tree Protocol (STP)
c. OSPF
d. DHCP
Answer: b. Spanning Tree Protocol (STP)
cisco+2 - What problem does BPDU Guard aim to prevent in Ethernet networks?
a. Eavesdropping
b. Network loops
c. ARP spoofing
d. MAC flooding
Answer: b. Network loops
networkjourney+2 - BPDU Guard is commonly enabled on which type of switch port?
a. Trunk port
b. Access port
c. Uplink port
d. Management port
Answer: b. Access port
networkacademy+2 - What happens if a BPDU is received on a port with BPDU Guard enabled?
a. The port remains active
b. The port transitions to err-disable state
c. The port switches to trunk mode
d. The switch reboots
Answer: b. The port transitions to err-disable state
cbtnuggets+2 - What is the main security benefit of using BPDU Guard?
a. Prevents VLAN hopping
b. Protects against rogue switches
c. Blocks broadcast storms
d. Stops all BPDUs
Answer: b. Protects against rogue switches
orhanergun+2 - Which Cisco switching feature is usually paired with BPDU Guard for extra protection?
a. PortFast
b. EtherChannel
c. LACP
d. Storm Control
Answer: a. PortFast
networkjourney+2 - True or False: BPDU Guard can help prevent accidental spanning-tree reconfigurations in enterprise networks.
a. True
b. False
Answer: a. True
cisco+2 - What action is recommended if a port is err-disabled due to BPDU Guard?
a. Disable STP
b. Investigate for misconfigured or rogue devices
c. Ignore the alert
d. Reboot the switch immediately
Answer: b. Investigate for misconfigured or rogue devices
cbtnuggets+2 - On which devices is BPDU Guard most often configured?
a. Routers
b. Workstations
c. Network switches
d. Firewalls
Answer: c. Network switches
networkacademy+2 - Which of the following best describes a rogue BPDU?
a. A BPDU coming from the root switch
b. A BPDU from an unauthorized device
c. A BPDU on a trunk port
d. A BPDU containing errors
Answer: b. A BPDU from an unauthorized device
orhanergun+2 - In which situation should BPDU Guard NOT be enabled?
a. On end-user access ports
b. On uplink ports connecting to other switches
c. On ports connecting to printers
d. On unused ports
Answer: b. On uplink ports connecting to other switches
networkjourney+2 - What is the errdisable state in network switches?
a. Port is administratively shut down
b. Port is disabled automatically due to error conditions
c. Port defaults to trunk mode
d. Port is placed into VLAN 1
Answer: b. Port is disabled automatically due to error conditions
cisco+2 - What is a key warning sign indicating BPDU Guard should be enabled on a given port?
a. The port connects to a user workstation
b. The port has frequent BPDU traffic
c. The port is unused
d. The port connects to another switch
Answer: a. The port connects to a user workstation
cbtnuggets+2 - Why does BPDU Guard disable a port instead of ignoring BPDUs?
a. To lag network attackers
b. To prevent network instability
c. For compliance reasons
d. No meaningful reason
Answer: b. To prevent network instability
networkacademy+2 - What command enables BPDU Guard globally on Cisco switches?
a. spanning-tree bpduguard enable
b. enable bpdu guard
c. switchport bpduguard enable
d. spanning-tree portfast bpduguard default
Answer: d. spanning-tree portfast bpduguard default
cisco+2 - What is the default action when BPDU Guard is triggered?
a. Log the event, but no action
b. Shut down the interface (errdisable)
c. Notify the user
d. Spam the network with alerts
Answer: b. Shut down the interface (errdisable)
networkjourney+2 - On which types of ports is PortFast typically used along with BPDU Guard?
a. Access ports connecting to end devices
b. Trunk ports
c. Uplink ports
d. Loopback ports
Answer: a. Access ports connecting to end devices
cbtnuggets+2 - What would likely result if an attacker connected a rogue switch to an access port without BPDU Guard enabled?
a. Enhanced network security
b. Possible loss of network stability
c. Faster network
d. More available IP addresses
Answer: b. Possible loss of network stability
orhanergun+2 - What is a BPDU?
a. Short UDP packet
b. Special Ethernet frame for STP info
c. HTTP packet
d. VLAN tag
Answer: b. Special Ethernet frame for STP info
networkacademy+2 - Who defines the BPDU standard?
a. IEEE
b. ISO
c. IETF
d. NIST
Answer: a. IEEE
cisco+2 - In a typical scenario, what should you do if BPDU Guard keeps err-disabling multiple access ports?
a. Ignore it
b. Check for improper switch connections
c. Disable all security features
d. Increase VLAN count
Answer: b. Check for improper switch connections
networkjourney+2 - How does BPDU Guard support network segmentation?
a. By disabling routing
b. By preventing bridges in user access layers
c. By creating extra VLANs
d. By enabling NAT
Answer: b. By preventing bridges in user access layers
networkacademy+2 - When a port enters errdisable due to BPDU Guard, which command usually brings it back after fixing the issue?
a. no shutdown
b. shutdown then no shutdown
c. reload
d. reload bpdu
Answer: b. shutdown then no shutdown
cisco+2 - What is the effect of BPDU Guard on a legitimate switch uplink?
a. Provides smooth operation
b. Causes network outage
c. No impact
d. Increases speed
Answer: b. Causes network outage
cbtnuggets+2 - Which switch manufacturer does NOT support BPDU Guard?
a. Cisco
b. Juniper
c. Netgear
d. All major switch vendors support it
Answer: d. All major switch vendors support it
juniper+2 - What event triggers BPDU Guard?
a. Receipt of multicast packet
b. Receipt of BPDU on PortFast-enabled port
c. High CPU utilization
d. MAC address flooding
Answer: b. Receipt of BPDU on PortFast-enabled port
networkjourney+2 - BPDU Guard helps break which threat chain in cybersecurity?
a. Insider privilege escalation
b. Rogue device introduction
c. Wireless sniffing
d. DNS poisoning
Answer: b. Rogue device introduction
networkacademy+2 - On Cisco switches, how is BPDU Guard enabled for a specific interface?
a. bpdu guard enable
b. interface bpduguard enable
c. switchport portfast bpduguard enable
d. spanning-tree bpduguard enable
Answer: d. spanning-tree bpduguard enable
cbtnuggets+2 - Is BPDU Guard useful in home Wi-Fi networks?
a. Always
b. Rarely, unless using managed switches
c. Never
d. Only on wireless
Answer: b. Rarely, unless using managed switches
cisco+2 - BPDU Guard is often recommended in which environment?
a. Data centers
b. Internet cafes
c. Home offices
d. Open Wi-Fi
Answer: a. Data centers
networkjourney+2 - Is BPDU Guard considered a Layer 2 or Layer 3 feature?
a. Layer 1
b. Layer 2
c. Layer 3
d. Layer 4
Answer: b. Layer 2
cbtnuggets+2 - Which protocol is protected by BPDU Guard?
a. SNMP
b. Spanning Tree Protocol
c. SIP
d. MPLS
Answer: b. Spanning Tree Protocol
networkacademy+2 - Which of these is a disadvantage of not using BPDU Guard?
a. Increased throughput
b. Enhanced stability
c. Higher risk of network loops
d. Greater wireless range
Answer: c. Higher risk of network loops
cisco+2 - What is one indicator that a port is err-disabled?
a. The link light remains constant
b. The interface status shows ‘err-disabled’
c. The port is not listed in show running-config
d. The port’s MAC address changes frequently
Answer: b. The interface status shows ‘err-disabled’
networkjourney+2 - BPDU is sent periodically to maintain which network aspect?
a. Network speed
b. Spanning-tree topology
c. Firewall rules
d. SNMP monitoring
Answer: b. Spanning-tree topology
cbtnuggets+2 - Why should BPDU Guard not be enabled on switch-to-switch links?
a. Because it increases port speed
b. Because BPDU exchange is required for STP operation
c. It depletes bandwidth
d. It changes switch MAC addresses
Answer: b. Because BPDU exchange is required for STP operation
networkacademy+2 - If BPDU Guard disables a port, what is the switch protecting against?
a. Virus
b. Network loop
c. Routing protocol error
d. DHCP starvation
Answer: b. Network loop
cisco+2 - BPDU Guard is triggered on a port due to what kind of device being attached?
a. Printer
b. Access point
c. Switch
d. VoIP phone
Answer: c. Switch
networkjourney+2 - What should be done before re-enabling a port disabled by BPDU Guard?
a. Reboot the network
b. Remove unauthorized device
c. Change the port VLAN
d. Delete STP config
Answer: b. Remove unauthorized device
networkacademy+2 - Which switch CLI command shows ports shut down by BPDU Guard?
a. show spanning-tree bpduguard
b. show errdisable recovery
c. show vlan
d. show port status
Answer: b. show errdisable recovery
cbtnuggets+2 - Can BPDU Guard be configured on a per-port basis?
a. Yes
b. No
Answer: a. Yes
cisco+2 - Is BPDU Guard an effective defense against broadcast storms?
a. Yes
b. No
Answer: b. No
networkjourney+2 - What does PortFast do in combination with BPDU Guard?
a. Delays STP convergence
b. Allows ports to move rapidly to forwarding state
c. Restricts network speed
d. Enables trunking
Answer: b. Allows ports to move rapidly to forwarding state
networkacademy+2 - What can happen if an end device sends BPDUs?
a. Nothing happens
b. Port is disabled if BPDU Guard is active
c. Network speed increases
d. All ports are disabled
Answer: b. Port is disabled if BPDU Guard is active
cbtnuggets+2 - When configuring BPDU Guard globally, which type of ports does it protect?
a. All switch ports
b. Only those with PortFast
c. Only trunk ports
d. Only SVI
Answer: b. Only those with PortFast
cisco+2 - What is a common troubleshooting step when BPDU Guard keeps disabling ports unexpectedly?
a. Disable BPDU Guard
b. Check for unauthorized switches
c. Reboot all devices
d. Configure DHCP snooping
Answer: b. Check for unauthorized switches
networkjourney+2 - Which of the following increases risk if BPDU Guard is not set up in large enterprises?
a. Easy remote access
b. Vulnerability to network loops
c. Faster link speeds
d. Better VoIP quality
Answer: b. Vulnerability to network loops
networkacademy+2 - BPDU Guard can be considered as part of which larger IT policy?
a. Physical security
b. Network access control
c. Anti-virus strategy
d. Data backup
Answer: b. Network access control
cbtnuggets+2 - What is the primary effect of BPDU Guard on legacy network segments?
a. Ensures backward compatibility
b. Prevents unexpected topology changes from old switches
c. Disables all non-Cisco devices
d. Increases wireless coverage
Answer: b. Prevents unexpected topology changes from old switches
- https://www.cbtnuggets.com/blog/technology/networking/what-is-bpdu-guard
- https://www.networkacademy.io/ccna/spanning-tree/bpdu-guard
- https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/10586-65.html
- https://networkjourney.com/mastering-portfast-bpdu-guard-loop-guard-stp-protection-techniques-explained-with-lab-cli-ccnp-enterprise/
- https://orhanergun.net/bpdu-guard-vs-bpdu-filter-which-should-you-use
- https://www.juniper.net/documentation/us/en/software/junos/stp-l2/topics/topic-map/spanning-tree-bpdu-protection.html