Examkin

Question

Difficulty: MediumNetwork Performance Monitoring and Metrics

During a routine security review, a network team must update device telemetry settings on WAN edge routers to enable continuous hardware performance polling. The organization's compliance mandate requires both cryptographic user authentication and payload encryption for all management traffic. Which protocol configuration should the team implement on the devices?

  1. SNMPv3 using the authPriv security levelAnswer
  2. B
    SNMPv3 using the authNoPriv security level
  3. C
    SNMPv2c utilizing a read-only community string over UDP port 161
  4. D
    SNMPv3 using the noAuthNoPriv security level over SSH port 22

Answer

SNMPv3 using the authPriv security level
The authPriv security level in SNMPv3 enforces both user authentication (via HMAC-SHA or HMAC-MD5) and payload encryption (via AES or DES). This satisfies the requirement for secured performance metric collection.

Step-by-Step Solution

1
Identify compliance requirements
Requirements specify both authentication and encryption for monitoring traffic.
Security mandates require mutual verification of origin and payload confidentiality.
2
Evaluate SNMP security levels
authPriv provides cryptographic authentication (auth) and payload privacy/encryption (priv).
SNMPv3 supports three levels: noAuthNoPriv (none), authNoPriv (authentication only), and authPriv (authentication and encryption).

Key Concept

SNMPv3 Security Levels and Cryptographic Protection
Rate this question

Topics

Network Performance Monitoring and Metrics

More questions from this topic