Examkin

Question

Difficulty: MediumNetwork Performance Monitoring and Metrics

A network administrator must implement a continuous telemetry solution to monitor interface bandwidth utilization and device CPU metrics on core switches located across a remote branch link. Company security policy dictates that all monitoring data must be protected against eavesdropping and unauthorized tampering while in transit. Which protocol and configuration level should the administrator select to meet these security and performance monitoring requirements?

  1. SNMPv3 configured with the authPriv security levelAnswer
  2. B
    SNMPv2c configured with a complex 32-character read-only community string
  3. C
    SNMPv3 configured with the noAuthNoPriv security level
  4. D
    SNMPv3 configured with the authNoPriv security level

Answer

SNMPv3 configured with the authPriv security level is the correct configuration because it provides both user authentication and payload encryption for network metric polling.
SNMPv3 with the authPriv (Authentication and Privacy) security level uses cryptographic protocols such as HMAC-SHA for authentication and AES for payload encryption. This ensures performance monitoring metrics remain confidential and tamper-proof across unsecure remote links.

Step-by-Step Solution

1
Identify the primary requirement
The scenario demands polling interface and CPU metrics while guaranteeing data privacy (encryption) and packet integrity/authentication over a remote link.
Security policy compliance mandates protection against passive interception and unauthorized polling.
2
Evaluate SNMP version security features
SNMPv1 and SNMPv2c lack cryptographic encryption and use cleartext community strings. SNMPv3 introduces user-based security models (USM).
SNMPv3 is required for secure enterprise network performance monitoring.
3
Determine the exact SNMPv3 security level
noAuthNoPriv offers no security, authNoPriv offers authentication without payload encryption, whereas authPriv enforces both authentication and AES packet encryption.
authPriv is the only mode that satisfies both confidentiality and integrity requirements.

Key Concept

SNMPv3 Security Levels and Telemetry Security
Rate this question

Topics

Network Performance Monitoring and Metrics

More questions from this topic