What is a practice that protects a network from VLAN hopping attacks?

What is a practice that protects a network from VLAN hopping attacks?

A. Implement port security on internet-facing VLANs B. Enable dynamic ARP inspection C. Assign all access ports to VLANs other than the native VLAN D. Configure an ACL to prevent traffic from changing VLANs