Is the correct answer not "It is unable to protect tunneled traffic".
The current correct answer "It filters rogue RA broadcasts from connected hosts" is not correct because IPv6 RAs use the all-nodes multicast address FF02::1, not a broadcast address.

https://content.cisco.com/chapter.sjs?ur...d.html.xml

Hello I think the answer here is incorrect.

It says "Allow the NA and NS messages, which are denied by the implicit deny".

However, in IPv6 ACLs, the Neighbor Discovery is implicitly allowed:

https://www.cisco.com/c/en/us/support/do...cl-00.html
 
>>  Each IPv6 ACL contains implicit permit rules to enable IPv6 neighbor discovery. These rules can be overridden by the user by placing a deny ipv6 any any statement within an ACL. 

Can you please check?

Do the customer site routers need the "ip vrf forwarding A" command?
Is the selected answer correct because the customer routers are using VRF-Lite?

Hello,

On question AND71 from the CCNA 200-301 practice test, Host Operating System is defined as "an operating system instance that is decoupled from the server hardware" and Virtual Machine is defined as "the software that manages the basic functions of the physical hardware". I believe these two definitions need to be swapped.

Thank you

Struggling to understand this question... Its on about VPN import and export routes but the possible answers relate to different router hostnames rather than actual differences in config. I have no idea how we're meant to guess what router hostname is correct if there's no mention of it in the diagram.

Would appreciate an explanation from someone on this, as I don't even know where to begin with trying to understand this...

Hello
I need to get the CCNA Security cert also as it is a DoD IAT Level Certification required for most DoD jobs. Where can I get those practice questions and answers?
Matt

Just when I think I am almost ready to sit for the exam new questions are added (again).  I noticed 14 new questions added to the practice exam.  Is there more to come?

QID:285 (dot symbol between ip address and mask)

3 of 4 answers have error in line 4th (IP ADDRESS and MASK are connected by ".") ===> 192.168.1.1.255.255.255.0

Hello,

In QID:AR231

IP address cannot use "," between octets ==see==> [172,16.1.1 and 10,1,1.0]

(...) The IPv4 portion of the address must contain three periods and four octets(...)

The radio selection button is "splitting" the multiple choice answers in half on QID: AR015.  This makes choosing the correct answer very confusing because half of the correct config statement sits above the selection radio button.  The other half of the config is at the radio button, but then runs into the beginning of the next multiple choice option, as if it is a part of the next choice.  Please re-format this QID to eliminate all of the confusion.