A network administrator is investigating intermittent VoIP audio degradation across an enterprise WAN link connecting two branch offices. Telephony logs indicate elevated packet loss and jitter during peak operational hours. Corporate security policy dictates that all infrastructure monitoring must utilize encrypted payload data and cryptographic authentication to prevent packet interception on intermediate links. Additionally, the administrator must gather interface bandwidth utilization baselines alongside granular protocol flow analysis to isolate the source of network congestion. Which of the following protocol and security level combinations correctly fulfills both operational and security requirements?
- Configure SNMPv3 using the authPriv security level for interface metric polling, and deploy IPFIX to export traffic flow statistics for jitter analysis.Answer
- BConfigure SNMPv3 using the authNoPriv security level for interface metric polling, and configure Syslog over UDP port 514 to capture traffic metrics.
- CConfigure SNMPv2c with encrypted community strings over UDP port 161 for interface polling, and use sFlow over TCP port 161 to track voice jitter statistics.
- DConfigure SNMPv3 using the noAuthNoPriv security level for interface polling, and rely on ICMP ECHO tracking over UDP port 53 to collect baseline utilization values.
Answer
Configure SNMPv3 using the authPriv security level for interface metric polling, and deploy IPFIX to export traffic flow statistics for jitter analysis.
The correct option fulfills both requirements: SNMPv3 at the authPriv security level provides cryptographic authentication as well as payload encryption (privacy) using AES or DES, meeting the strict enterprise security mandate. Additionally, IPFIX (IP Flow Information Export) is an industry-standard protocol for analyzing flow data such as VoIP jitter, latency, and packet loss across WAN links.
Step-by-Step Solution
Key Concept
SNMPv3 Security Levels and Network Flow Telemetry Integration