Blog

MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.


  1. What does BPDU stand for?
    a. Bridge Protocol Data Unit
    b. Backup Port Detection Utility
    c. Blocking Port Data Unit
    d. Bridge Port Delay Utility
    Answer: a. Bridge Protocol Data Unit
    networkacademy+2
  2. Which primary protocol uses BPDU in network switches?
    a. ARP
    b. Spanning Tree Protocol (STP)
    c. OSPF
    d. DHCP
    Answer: b. Spanning Tree Protocol (STP)
    cisco+2
  3. What problem does BPDU Guard aim to prevent in Ethernet networks?
    a. Eavesdropping
    b. Network loops
    c. ARP spoofing
    d. MAC flooding
    Answer: b. Network loops
    networkjourney+2
  4. BPDU Guard is commonly enabled on which type of switch port?
    a. Trunk port
    b. Access port
    c. Uplink port
    d. Management port
    Answer: b. Access port
    networkacademy+2
  5. What happens if a BPDU is received on a port with BPDU Guard enabled?
    a. The port remains active
    b. The port transitions to err-disable state
    c. The port switches to trunk mode
    d. The switch reboots
    Answer: b. The port transitions to err-disable state
    cbtnuggets+2
  6. What is the main security benefit of using BPDU Guard?
    a. Prevents VLAN hopping
    b. Protects against rogue switches
    c. Blocks broadcast storms
    d. Stops all BPDUs
    Answer: b. Protects against rogue switches
    orhanergun+2
  7. Which Cisco switching feature is usually paired with BPDU Guard for extra protection?
    a. PortFast
    b. EtherChannel
    c. LACP
    d. Storm Control
    Answer: a. PortFast
    networkjourney+2
  8. True or False: BPDU Guard can help prevent accidental spanning-tree reconfigurations in enterprise networks.
    a. True
    b. False
    Answer: a. True
    cisco+2
  9. What action is recommended if a port is err-disabled due to BPDU Guard?
    a. Disable STP
    b. Investigate for misconfigured or rogue devices
    c. Ignore the alert
    d. Reboot the switch immediately
    Answer: b. Investigate for misconfigured or rogue devices
    cbtnuggets+2
  10. On which devices is BPDU Guard most often configured?
    a. Routers
    b. Workstations
    c. Network switches
    d. Firewalls
    Answer: c. Network switches
    networkacademy+2
  11. Which of the following best describes a rogue BPDU?
    a. A BPDU coming from the root switch
    b. A BPDU from an unauthorized device
    c. A BPDU on a trunk port
    d. A BPDU containing errors
    Answer: b. A BPDU from an unauthorized device
    orhanergun+2
  12. In which situation should BPDU Guard NOT be enabled?
    a. On end-user access ports
    b. On uplink ports connecting to other switches
    c. On ports connecting to printers
    d. On unused ports
    Answer: b. On uplink ports connecting to other switches
    networkjourney+2
  13. What is the errdisable state in network switches?
    a. Port is administratively shut down
    b. Port is disabled automatically due to error conditions
    c. Port defaults to trunk mode
    d. Port is placed into VLAN 1
    Answer: b. Port is disabled automatically due to error conditions
    cisco+2
  14. What is a key warning sign indicating BPDU Guard should be enabled on a given port?
    a. The port connects to a user workstation
    b. The port has frequent BPDU traffic
    c. The port is unused
    d. The port connects to another switch
    Answer: a. The port connects to a user workstation
    cbtnuggets+2
  15. Why does BPDU Guard disable a port instead of ignoring BPDUs?
    a. To lag network attackers
    b. To prevent network instability
    c. For compliance reasons
    d. No meaningful reason
    Answer: b. To prevent network instability
    networkacademy+2
  16. What command enables BPDU Guard globally on Cisco switches?
    a. spanning-tree bpduguard enable
    b. enable bpdu guard
    c. switchport bpduguard enable
    d. spanning-tree portfast bpduguard default
    Answer: d. spanning-tree portfast bpduguard default
    cisco+2
  17. What is the default action when BPDU Guard is triggered?
    a. Log the event, but no action
    b. Shut down the interface (errdisable)
    c. Notify the user
    d. Spam the network with alerts
    Answer: b. Shut down the interface (errdisable)
    networkjourney+2
  18. On which types of ports is PortFast typically used along with BPDU Guard?
    a. Access ports connecting to end devices
    b. Trunk ports
    c. Uplink ports
    d. Loopback ports
    Answer: a. Access ports connecting to end devices
    cbtnuggets+2
  19. What would likely result if an attacker connected a rogue switch to an access port without BPDU Guard enabled?
    a. Enhanced network security
    b. Possible loss of network stability
    c. Faster network
    d. More available IP addresses
    Answer: b. Possible loss of network stability
    orhanergun+2
  20. What is a BPDU?
    a. Short UDP packet
    b. Special Ethernet frame for STP info
    c. HTTP packet
    d. VLAN tag
    Answer: b. Special Ethernet frame for STP info
    networkacademy+2
  21. Who defines the BPDU standard?
    a. IEEE
    b. ISO
    c. IETF
    d. NIST
    Answer: a. IEEE
    cisco+2
  22. In a typical scenario, what should you do if BPDU Guard keeps err-disabling multiple access ports?
    a. Ignore it
    b. Check for improper switch connections
    c. Disable all security features
    d. Increase VLAN count
    Answer: b. Check for improper switch connections
    networkjourney+2
  23. How does BPDU Guard support network segmentation?
    a. By disabling routing
    b. By preventing bridges in user access layers
    c. By creating extra VLANs
    d. By enabling NAT
    Answer: b. By preventing bridges in user access layers
    networkacademy+2
  24. When a port enters errdisable due to BPDU Guard, which command usually brings it back after fixing the issue?
    a. no shutdown
    b. shutdown then no shutdown
    c. reload
    d. reload bpdu
    Answer: b. shutdown then no shutdown
    cisco+2
  25. What is the effect of BPDU Guard on a legitimate switch uplink?
    a. Provides smooth operation
    b. Causes network outage
    c. No impact
    d. Increases speed
    Answer: b. Causes network outage
    cbtnuggets+2
  26. Which switch manufacturer does NOT support BPDU Guard?
    a. Cisco
    b. Juniper
    c. Netgear
    d. All major switch vendors support it
    Answer: d. All major switch vendors support it
    juniper+2
  27. What event triggers BPDU Guard?
    a. Receipt of multicast packet
    b. Receipt of BPDU on PortFast-enabled port
    c. High CPU utilization
    d. MAC address flooding
    Answer: b. Receipt of BPDU on PortFast-enabled port
    networkjourney+2
  28. BPDU Guard helps break which threat chain in cybersecurity?
    a. Insider privilege escalation
    b. Rogue device introduction
    c. Wireless sniffing
    d. DNS poisoning
    Answer: b. Rogue device introduction
    networkacademy+2
  29. On Cisco switches, how is BPDU Guard enabled for a specific interface?
    a. bpdu guard enable
    b. interface bpduguard enable
    c. switchport portfast bpduguard enable
    d. spanning-tree bpduguard enable
    Answer: d. spanning-tree bpduguard enable
    cbtnuggets+2
  30. Is BPDU Guard useful in home Wi-Fi networks?
    a. Always
    b. Rarely, unless using managed switches
    c. Never
    d. Only on wireless
    Answer: b. Rarely, unless using managed switches
    cisco+2
  31. BPDU Guard is often recommended in which environment?
    a. Data centers
    b. Internet cafes
    c. Home offices
    d. Open Wi-Fi
    Answer: a. Data centers
    networkjourney+2
  32. Is BPDU Guard considered a Layer 2 or Layer 3 feature?
    a. Layer 1
    b. Layer 2
    c. Layer 3
    d. Layer 4
    Answer: b. Layer 2
    cbtnuggets+2
  33. Which protocol is protected by BPDU Guard?
    a. SNMP
    b. Spanning Tree Protocol
    c. SIP
    d. MPLS
    Answer: b. Spanning Tree Protocol
    networkacademy+2
  34. Which of these is a disadvantage of not using BPDU Guard?
    a. Increased throughput
    b. Enhanced stability
    c. Higher risk of network loops
    d. Greater wireless range
    Answer: c. Higher risk of network loops
    cisco+2
  35. What is one indicator that a port is err-disabled?
    a. The link light remains constant
    b. The interface status shows ‘err-disabled’
    c. The port is not listed in show running-config
    d. The port’s MAC address changes frequently
    Answer: b. The interface status shows ‘err-disabled’
    networkjourney+2
  36. BPDU is sent periodically to maintain which network aspect?
    a. Network speed
    b. Spanning-tree topology
    c. Firewall rules
    d. SNMP monitoring
    Answer: b. Spanning-tree topology
    cbtnuggets+2
  37. Why should BPDU Guard not be enabled on switch-to-switch links?
    a. Because it increases port speed
    b. Because BPDU exchange is required for STP operation
    c. It depletes bandwidth
    d. It changes switch MAC addresses
    Answer: b. Because BPDU exchange is required for STP operation
    networkacademy+2
  38. If BPDU Guard disables a port, what is the switch protecting against?
    a. Virus
    b. Network loop
    c. Routing protocol error
    d. DHCP starvation
    Answer: b. Network loop
    cisco+2
  39. BPDU Guard is triggered on a port due to what kind of device being attached?
    a. Printer
    b. Access point
    c. Switch
    d. VoIP phone
    Answer: c. Switch
    networkjourney+2
  40. What should be done before re-enabling a port disabled by BPDU Guard?
    a. Reboot the network
    b. Remove unauthorized device
    c. Change the port VLAN
    d. Delete STP config
    Answer: b. Remove unauthorized device
    networkacademy+2
  41. Which switch CLI command shows ports shut down by BPDU Guard?
    a. show spanning-tree bpduguard
    b. show errdisable recovery
    c. show vlan
    d. show port status
    Answer: b. show errdisable recovery
    cbtnuggets+2
  42. Can BPDU Guard be configured on a per-port basis?
    a. Yes
    b. No
    Answer: a. Yes
    cisco+2
  43. Is BPDU Guard an effective defense against broadcast storms?
    a. Yes
    b. No
    Answer: b. No
    networkjourney+2
  44. What does PortFast do in combination with BPDU Guard?
    a. Delays STP convergence
    b. Allows ports to move rapidly to forwarding state
    c. Restricts network speed
    d. Enables trunking
    Answer: b. Allows ports to move rapidly to forwarding state
    networkacademy+2
  45. What can happen if an end device sends BPDUs?
    a. Nothing happens
    b. Port is disabled if BPDU Guard is active
    c. Network speed increases
    d. All ports are disabled
    Answer: b. Port is disabled if BPDU Guard is active
    cbtnuggets+2
  46. When configuring BPDU Guard globally, which type of ports does it protect?
    a. All switch ports
    b. Only those with PortFast
    c. Only trunk ports
    d. Only SVI
    Answer: b. Only those with PortFast
    cisco+2
  47. What is a common troubleshooting step when BPDU Guard keeps disabling ports unexpectedly?
    a. Disable BPDU Guard
    b. Check for unauthorized switches
    c. Reboot all devices
    d. Configure DHCP snooping
    Answer: b. Check for unauthorized switches
    networkjourney+2
  48. Which of the following increases risk if BPDU Guard is not set up in large enterprises?
    a. Easy remote access
    b. Vulnerability to network loops
    c. Faster link speeds
    d. Better VoIP quality
    Answer: b. Vulnerability to network loops
    networkacademy+2
  49. BPDU Guard can be considered as part of which larger IT policy?
    a. Physical security
    b. Network access control
    c. Anti-virus strategy
    d. Data backup
    Answer: b. Network access control
    cbtnuggets+2
  50. What is the primary effect of BPDU Guard on legacy network segments?
    a. Ensures backward compatibility
    b. Prevents unexpected topology changes from old switches
    c. Disables all non-Cisco devices
    d. Increases wireless coverage
    Answer: b. Prevents unexpected topology changes from old switches

 

  1. https://www.cbtnuggets.com/blog/technology/networking/what-is-bpdu-guard
  2. https://www.networkacademy.io/ccna/spanning-tree/bpdu-guard
  3. https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/10586-65.html
  4. https://networkjourney.com/mastering-portfast-bpdu-guard-loop-guard-stp-protection-techniques-explained-with-lab-cli-ccnp-enterprise/
  5. https://orhanergun.net/bpdu-guard-vs-bpdu-filter-which-should-you-use
  6. https://www.juniper.net/documentation/us/en/software/junos/stp-l2/topics/topic-map/spanning-tree-bpdu-protection.html

Leave a Reply

Your email address will not be published. Required fields are marked *

error: Content is protected !!