An administrator wants to protect the switching network from a Layer 2 loop by preventing a port from transitioning if it unexpectedly receives BPDUs, and to prevent an inappropriate device from becoming the root bridge. Which two spanning-tree security features address these goals?