Which spanning tree protection feature disables ports when a violation occurs?

The spanning tree protection feature that disables ports when a violation occurs is called "Bridge Protocol Data Unit (BPDU) Guard." When BPDU Guard is enabled on a port, it monitors for incoming BPDUs, and if a BPDU is received on a port configured with this feature, the port is immediately placed in an error-disabled state to prevent potential loops or misconfigurations in the network. This helps maintain network stability by safeguarding against unwanted topology changes.