Examkin

Question

Difficulty: MediumNetwork Logging and Auditing

During a security compliance audit of an enterprise network, an administrator is tasked with remediating an auditing finding regarding switch telemetry monitoring. The audit report indicates that device monitoring traps sent across the management VLAN are vulnerable to packet sniffing because authentication credentials and telemetry payloads are transmitted without encryption. Which SNMP configuration mode should the administrator deploy to satisfy the audit requirement for both cryptographic user authentication and payload encryption?

  1. SNMPv3 configured with authPrivAnswer
  2. B
    SNMPv3 configured with authNoPriv
  3. C
    SNMPv2c configured with read-write community strings over UDP port 162
  4. D
    SNMPv3 configured with noAuthNoPriv over TCP port 161

Answer

SNMPv3 configured with authPriv is the correct choice as it enforces both cryptographic authentication and data payload encryption.
SNMPv3 with the authPriv (Authentication and Privacy) security level uses cryptographic algorithms such as SHA/MD5 for message authentication and hashing, and AES/DES for payload encryption. This ensures both integrity/authenticity of the monitoring host and privacy of transmitted telemetry across untrusted network segments.

Step-by-Step Solution

1
Analyze the audit compliance requirement
Identified the need for both credential authentication and payload confidentiality (encryption) for network monitoring telemetry.
The audit finding specifically highlighted unencrypted payloads and cleartext credential vulnerability.
2
Evaluate SNMP version security capabilities
Determined that SNMPv1 and SNMPv2c lack native cryptographic encryption, requiring SNMPv3.
Only SNMPv3 introduces user-based security models (USM) with selectable security levels.
3
Select the appropriate SNMPv3 security level
Selected authPriv (Authentication and Privacy).
authNoPriv adds authentication without encryption, whereas authPriv enforces both authentication and privacy/encryption.

Key Concept

SNMPv3 Security Levels and Telemetry Auditing
Estimated Time:1m 0s
Rate this question

Topics

Network Logging and Auditing

More questions from this topic