Examkin

Question

Difficulty: EasyNetwork Performance Monitoring and Metrics

A network administrator needs to collect baseline bandwidth utilization metrics from network switches across an enterprise subnet. Corporate security policy mandates that all monitoring traffic must support cryptographic authentication and data encryption. Which protocol version should the administrator configure to satisfy these security requirements?

  1. SNMPv3Answer
  2. B
    SNMPv2c
  3. C
    SNMPv1
  4. D
    TFTP over UDP port 69

Answer

SNMPv3 should be selected because it includes the User-based Security Model (USM) that supports authentication and encryption.
The selection of SNMPv3 fulfills the requirement for authenticated and encrypted monitoring communications. SNMPv3 incorporates the User-based Security Model (USM), allowing for the authPriv security level which encrypts telemetry payloads using algorithms such as AES.

Step-by-Step Solution

1
Identify the primary requirement
The scenario requires a network monitoring protocol that supports cryptographic authentication and payload encryption.
Security compliance mandates secure communication for gathering network device metrics.
2
Evaluate protocol security features
SNMPv3 is the only SNMP version that introduces USM, enabling authentication (HMAC-SHA/MD5) and encryption (AES/DES).
Earlier versions (SNMPv1 and SNMPv2c) pass community strings in cleartext across the network.

Key Concept

SNMP Version Security Capabilities
Rate this question

Topics

Network Performance Monitoring and Metrics

More questions from this topic