A network security administrator is updating telemetry and remote management policies for core switches transmitting data across an untrusted WAN link. To comply with security auditing standards requiring both encrypted log transport and secure network polling, which TWO of the following configuration options should be implemented? (Select TWO)
- Configure Syslog to transmit log events using TLS over TCP port 6514.Answer
- Configure SNMPv3 utilizing the authPriv security level for device polling.Answer
- CConfigure Syslog to transmit log events using TLS over UDP port 514.
- DConfigure SNMPv2c using the authNoPriv mode to encrypt management queries.
Answer
The correct configurations are configuring Syslog to transmit log events using TLS over TCP port 6514, and configuring SNMPv3 utilizing the authPriv security level for device polling.
Comprehensive network auditing across untrusted links requires encryption for both passive event streaming and active management polling. Syslog over TLS (RFC 5425) uses TCP port 6514 to ensure secure and reliable event delivery. For active querying, SNMPv3 authPriv is required as it enforces both cryptographic user authentication and payload encryption.
Step-by-Step Solution
Key Concept
Secure Telemetry Transport & Audit Protocols