(QID:AR482) What is a characteristic of IPv6 RA Guard?
I saw this question twice and the answers were different

one time was
It is unable to protect tunneled traffic
the next time was
it filters rouge RA broadcasts from connected hosts

which one is the correct answer?

Please can you provide an explanation for the answer. None of the answers seem correct?

Is the correct answer not "It is unable to protect tunneled traffic".
The current correct answer "It filters rogue RA broadcasts from connected hosts" is not correct because IPv6 RAs use the all-nodes multicast address FF02::1, not a broadcast address.

https://content.cisco.com/chapter.sjs?ur...d.html.xml

Hello I think the answer here is incorrect.

It says "Allow the NA and NS messages, which are denied by the implicit deny".

However, in IPv6 ACLs, the Neighbor Discovery is implicitly allowed:

https://www.cisco.com/c/en/us/support/do...cl-00.html
 
>>  Each IPv6 ACL contains implicit permit rules to enable IPv6 neighbor discovery. These rules can be overridden by the user by placing a deny ipv6 any any statement within an ACL. 

Can you please check?

Do the customer site routers need the "ip vrf forwarding A" command?
Is the selected answer correct because the customer routers are using VRF-Lite?

Hello,

On question AND71 from the CCNA 200-301 practice test, Host Operating System is defined as "an operating system instance that is decoupled from the server hardware" and Virtual Machine is defined as "the software that manages the basic functions of the physical hardware". I believe these two definitions need to be swapped.

Thank you

Struggling to understand this question... Its on about VPN import and export routes but the possible answers relate to different router hostnames rather than actual differences in config. I have no idea how we're meant to guess what router hostname is correct if there's no mention of it in the diagram.

Would appreciate an explanation from someone on this, as I don't even know where to begin with trying to understand this...

Hello
I need to get the CCNA Security cert also as it is a DoD IAT Level Certification required for most DoD jobs. Where can I get those practice questions and answers?
Matt

Just when I think I am almost ready to sit for the exam new questions are added (again).  I noticed 14 new questions added to the practice exam.  Is there more to come?

QID:285 (dot symbol between ip address and mask)

3 of 4 answers have error in line 4th (IP ADDRESS and MASK are connected by ".") ===> 192.168.1.1.255.255.255.0