Implementing Cisco Network Security (IINS v3.0) (#15)

Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port?

BPDU filter
DHCP snooping
PortFast
BPDU guard