Examkin

Question

Difficulty: EasySNMP Operations, MIBs, Traps, Informs, and Version Differences

A network administrator needs to configure SNMPv3 on a Cisco IOS router to support both message integrity verification using SHA and payload encryption using AES. Which SNMPv3 security level must be configured to meet these security requirements?

  1. authPrivAnswer
  2. B
    authNoPriv
  3. C
    noAuthNoPriv
  4. D
    privNoAuth

Answer

The authPriv security level must be configured because it provides both authentication and privacy (encryption).
The authPriv security level is the highest security mode available in SNMPv3. It combines authentication algorithms (such as HMAC-SHA or HMAC-MD5) to ensure packet integrity and sender authentication with encryption algorithms (such as AES or DES) to provide privacy for management traffic.

Step-by-Step Solution

1
Identify the required security parameters from the scenario.
The requirements are SHA authentication and AES payload encryption.
The administrator explicitly specifies message integrity verification and data confidentiality.
2
Map the requirements to the standard SNMPv3 security models.
The authPriv security level meets both requirements.
SNMPv3 defines three security levels: noAuthNoPriv (no authentication, no encryption), authNoPriv (authentication without encryption), and authPriv (authentication with encryption).

Key Concept

SNMPv3 Security Levels (noAuthNoPriv, authNoPriv, authPriv)
Rate this question

Topics

SNMP Operations, MIBs, Traps, Informs, and Version Differences

More questions from this topic