Examkin

Question

Difficulty: MediumNetwork Performance Monitoring and Metrics

An enterprise network administrator needs to set up performance monitoring to periodically poll CPU usage and interface bandwidth metrics across remote routers. Institutional security compliance mandates that all network telemetry must enforce both user authentication and data encryption in transit. Which monitoring protocol and security level should the administrator configure?

  1. SNMPv3 configured with the authPriv security levelAnswer
  2. B
    SNMPv2c configured with a complex read-only community string
  3. C
    SNMPv3 configured with the noAuthNoPriv security level
  4. D
    Syslog logging service operating over default UDP port 22

Answer

SNMPv3 configured with the authPriv security level
Simple Network Management Protocol version 3 (SNMPv3) with the authPriv (Authentication and Privacy) security level provides cryptographic user authentication using hashes like SHA and data payload encryption using algorithms like AES. This meets both performance monitoring and strict encryption compliance standards.

Step-by-Step Solution

1
Identify the primary performance monitoring requirement
The requirement calls for periodic polling of device performance metrics (CPU and interface bandwidth) across network hardware.
Simple Network Management Protocol (SNMP) is the standard protocol for polling device performance parameters and metrics.
2
Evaluate protocol security requirements
The compliance policy explicitly specifies both user authentication and data encryption in transit.
SNMPv1 and SNMPv2c send community strings in plaintext without encryption. Only SNMPv3 includes robust cryptographic security models.
3
Select the correct SNMPv3 security level
The authPriv security level provides authentication (auth) and privacy/encryption (priv).
authNoPriv provides authentication without encryption, whereas noAuthNoPriv provides neither cryptographic authentication nor encryption.

Key Concept

SNMP Security Levels and Telemetry Monitoring
Rate this question

Topics

Network Performance Monitoring and Metrics

More questions from this topic