Question

Difficulty: EasyNetwork Performance Monitoring and Metrics

A network technician needs to configure a network management system to monitor router performance metrics using SNMP. To meet security compliance standards, the communication must ensure both message authentication and payload encryption. Which SNMP version and security level should be selected?

  1. SNMPv3 with authPrivAnswer
  2. B
    SNMPv2c with read-write community strings
  3. C
    SNMPv3 with noAuthNoPriv
  4. D
    SNMPv1 with encrypted community strings

Answer

SNMPv3 configured with authPriv provides both cryptographic authentication and data privacy via payload encryption.
SNMPv3 using the authPriv security setting ensures complete security by implementing user authentication (auth) via hashing algorithms as well as payload privacy (priv) through encryption standards like AES.

Step-by-Step Solution

1
Identify the required monitoring protocol security parameters
The requirements demand both identity authentication and message encryption for performance monitoring traffic.
Authentication prevents unauthorized management sources, while encryption protects sensitive telemetry data from eavesdropping.
2
Select the appropriate SNMP version and User-based Security Model (USM) level
SNMPv3 authPriv combines message digest authentication (MD5/SHA) with encryption algorithms (DES/AES).
Legacy versions (v1 and v2c) transmit data in plain text, and lower SNMPv3 security levels omit either authentication or privacy.

Key Concept

SNMPv3 Security Levels (authPriv)
Estimated Time:45s
Rate this question