I was marked wrong for answering "increases network security against man-in-the-middle attacks and discourages denial of service attacks."

However, the Explanation describes what I answered above, about denial of service (not brute force attacks).

Can you please verify the correct answer to this question?

Thanks!

The green answer is wrong because

"eigrp stub summary" advertises only summaries and suppresses connected routes, so R1 won’t learn R2’s loopback /128s.

Correct: configure "eigrp stub connected summary" on R2 so the connected loopbacks are advertised.

Thanks

What are two differences between WPA2 and WPA3 wireless security? 

I was marked "wrong" for answering "WPA3 uses SAE for stronger protection than WPA2, which uses AES"

Are you saying this is incorrect??

Thanks for verifying

Question AN177 about lldp port-description my answer was that it needs to be under the interface (config-if)#lldp port-description, and it marked me as "wrong". The answer says it should be executed globallt (config)#lldp port-description

My digging says this is done on the interface. Please advise

Thanks!

What is recommended for the wireless infrastructure design of an organization?

• A. group access points together to increase throughput on a given channel
  
• B. configure the first three access points are configured to use Channels 1, 6, and 11
  
• C. include a least two access points on nonoverlapping channels to support load balancing
  
• D. assign physically adjacent access points to the same Wi-Fi channel
  

QID:AN328 What are two characteristics of the distribution layer in a three-tier network architecture? (Choose two.)

• provides a boundary between Layer 2 and Layer 3 communications serves as the network aggregation pointdesigned to meet continuous, redundant uptime requirementsis the backbone for the network topologyphysical connection point for a LAN printer

Me again, I believe this one is also wrong


[*]Main reason current answer is wrong: It configures MD5 message-digest when the interface shows cryptographic (key-chain) auth.
[*]Secondary reason: Even if it had used key-chain auth, it points to a key chain called Cisco which doesn’t exist. The correct chain is ospf with key 1


Thanks

Disagree with the answer which states DNS is the issue.


The inbound ACL ends with 
permit ip 10.66.42.0 0.0.0.255 any  ⟵ wrong subnet

permit ip 10.66.46.0 0.0.0.255 any  ⟵ only half the /23

Effect: clients that land in 10.66.47.0/24 are implicitly denied on the inbound ACL, so “not all guests” can reach the internet (they still get DHCP because bootpc/bootps are permitted).


Seems like to me, the answer should be fixing the /24 wildcard to a /23 on the inbound ACL.

Thanks.

Passed this exam Saturday. Questions here are valid. However, make sure to understand the material. Not sure about all the answers here...

Hey guys. 
I´m I the only one who can't find the "Download .pka file" icon to this task?
It's not seen at the bottom of the page in my browser
Local User, NACL & DHCP snooping Sim #1