Cisco Certified Network Professional Practice Test

The command that enables BPDU Guard globally is "spanning-tree portfast bpduguard default." This command is crucial for enhancing the stability and security of a network by preventing Bridge Protocol Data Units (BPDUs) from being sent on ports configured with PortFast. When BPDU Guard is enabled, any port configured for PortFast that receives a BPDU will be placed into an error-disabled state, effectively protecting the network from potential loops and misconfigurations caused by erroneous or malicious devices connecting to these ports. This global setting provides a safeguard against scenarios where an end device may inadvertently send BPDUs, which can disrupt the normal operation of the Spanning Tree Protocol (STP). By utilizing this command, network administrators can enforce BPDU Guard on all relevant interfaces automatically, rather than managing each interface individually. The other commands listed serve different purposes, such as enabling loop guard or configuring BPDU guard on individual interfaces rather than globally. Understanding the specific uses and implications of these commands is essential in managing a secure and efficient network environment.