Question

Difficulty: MediumSNMP Operations, MIBs, Traps, Informs, and Version Differences

Match each Simple Network Management Protocol (SNMP) operational element or security configuration on the left with its corresponding defining characteristic or transport mechanism on the right.

  • SNMP TrapUnacknowledged event notification sent asynchronously from a managed device to NMS destination UDP port 162
  • SNMP InformReliable notification sent to UDP port 162 that requires explicit receipt confirmation and supports retransmissions
  • SNMP GetNextManager-initiated request sent to UDP port 161 to sequentially traverse and discover entries in a MIB hierarchy
  • SNMPv3 authPrivSecurity level that provides cryptographic message authentication along with data confidentiality via encryption

Answer

SNMP Trap matches the unacknowledged notification sent to UDP 162; SNMP Inform matches the reliable notification requiring confirmation sent to UDP 162; SNMP GetNext matches the request to traverse MIB entries sequentially via UDP 161; SNMPv3 authPriv matches the security level providing authentication and encryption.
SNMP Traps are unacknowledged alerts sent to UDP port 162. SNMP Informs are reliable alerts sent to UDP port 162 that mandate confirmation. SNMP GetNext requests allow walking MIB structures sequentially using UDP port 161. SNMPv3 authPriv adds both authentication hashing and encryption privacy.

Step-by-Step Solution

1
Differentiate SNMP notification types based on acknowledgment mechanisms
Traps are unacknowledged best-effort notifications. Informs are application-layer acknowledged notifications that retransmit if no response is received.
Informs add reliability over UDP by requiring an explicit response from the SNMP receiver.
2
Identify polling operations and transport ports
GetNext queries are initiated by the manager to pull the subsequent OID in a MIB tree over agent listening port UDP 161.
SNMP managers query agents using port 161, whereas agents send notifications to manager port 162.
3
Evaluate SNMPv3 security levels
authPriv combines packet hashing for identity verification with data encryption for confidentiality.
SNMPv3 defines three levels: noAuthNoPriv (no auth/crypto), authNoPriv (auth without crypto), and authPriv (both auth and crypto).

Key Concept

SNMP operations, message types, transport ports, and SNMPv3 security models.
Rate this question