Question: what is the difference between bpdu guard and root guard?
Answer: BPDU guard disables the port upon BPDU reception if PortFast is enabled on the port. The disablement effectively denies devices behind such ports from participation in STP. ... Root guard allows the device to participate in STP as long as the device does not try to become the root.