What is the best way to prevent a VLAN hopping attack?

What is the best way to prevent a VLAN hopping attack?

A.
Encapsulate trunk ports with IEEE 802.1Q.

B.
Physically secure data closets.

C.
Disable DTP negotiations.

D.
Enable BDPU guard.