Exam N10-006 topic 5 question 21 discussion

Even though answer D is technically correct, it is nevertheless a rather specific answer to a question the leans on to a more of a generalist inquiry (hint: the use of 'main difference between' - as there are, no doubt, other examples (other than MITM) of potential security threats when scouring the WWW unprotected. Anyhow, like eindicatd, Answer D would be fine were it not for the existence of answer B, which in my opinion reflects (answers | explains) the 'generalist' question type more adequately. Case in point: If some random person asked about the main differences between port 80 and port 443, the most succinct (and natural) answer would be encryption (or lack thereof), not (even though technically correct) a more specific potential threat example as with MITM... Rule of thumb when working in IT networking and dealing with its security subset: don't necessarily complicate matters, even (or more so) when answering simple questions. Nutshell: Answer B would be better suited rather than D even if both are correct. Side note (not to complicate matters) > there are means to encrypt traffic on port 80, but that is beyond the scope of this cert and specifically Question # 22...if interested though: https://letsencrypt.org/docs/allow-port-80/