Examkin

Question

Difficulty: HardNetwork Performance Monitoring and Metrics

During a network audit, a systems engineer observes peak-hour throughput saturation on a primary WAN edge switch. The engineer must implement telemetry monitoring to track traffic volume by source/destination IP address pairs, protocols, and port numbers without capturing full packet payloads. Additionally, hardware health metrics must be polled securely across the management VLAN with requirements for cryptographic user authentication and data encryption. Which combination of monitoring technologies and security configurations meets all specified requirements?

  1. IPFIX to export flow-based traffic statistics, paired with SNMPv3 configured with the authPriv security level for device polling.Answer
  2. B
    NetFlow to export flow-based traffic statistics, paired with SNMPv3 configured with the noAuthNoPriv security level for device polling.
  3. C
    Syslog configured over TCP port 161 to collect flow data, paired with SNMPv2c utilizing community strings for device polling.
  4. D
    sFlow configured to capture full packet payloads, paired with SNMPv1 using UDP port 514 for device polling.

Answer

IPFIX to export flow-based traffic statistics, paired with SNMPv3 configured with the authPriv security level for device polling.
The correct answer combines IPFIX for flow metadata aggregation (analyzing bandwidth utilization, top talkers, and protocol distribution without storing complete frame payloads) with SNMPv3 operating at the authPriv security tier. The authPriv setting enforces SHA/MD5 message digest authentication and AES/DES payload encryption, satisfying all organizational security requirements.

Step-by-Step Solution

1
Identify the telemetry technology suitable for non-intrusive traffic composition analysis.
IPFIX (or NetFlow) collects traffic statistics such as source/destination IP addresses, port numbers, and protocol types without recording full packet payloads.
Flow-based monitoring provides top-talker and bandwidth usage distribution without consuming significant storage or violating payload privacy.
2
Evaluate SNMP versions and security parameters required for secure device metrics polling.
SNMPv3 with the authPriv (Authentication and Privacy) level is required.
authNoPriv only authenticates without encrypting, while SNMPv1 and SNMPv2c rely on cleartext community strings. authPriv ensures both cryptographic authentication (MD5/SHA) and payload encryption (DES/AES).
3
Combine the compliant technologies to select the correct configuration.
IPFIX combined with SNMPv3 authPriv satisfies all requirements.
This combination fulfills both the metadata flow analysis requirement and the secure encrypted polling mandate.

Key Concept

Flow-based Telemetry vs. Secure SNMP Polling
Estimated Time:2m 0s
Rate this question

Topics

Network Performance Monitoring and Metrics

More questions from this topic