Examkin

Question

Difficulty: MediumNetwork Performance Monitoring and Metrics

Following an internal compliance audit, an enterprise network engineering team must update performance monitoring configurations across core switches. The updated security baseline requires all device metrics polling to enforce cryptographic user authentication as well as full packet payload encryption. Which protocol configuration satisfies these performance monitoring security requirements?

  1. SNMPv3 configured with the authPriv security levelAnswer
  2. B
    SNMPv3 configured with the authNoPriv security level
  3. C
    SNMPv2c configured with an encrypted community string
  4. D
    SNMPv3 configured with the authPriv security level over TCP port 161

Answer

SNMPv3 configured with the authPriv security level
SNMPv3 configured with the authPriv (Authentication and Privacy) security level provides cryptographic user authentication using SHA/MD5 hashing alongside payload privacy through encryption algorithms such as AES. This combination directly fulfills the requirement for authenticated and encrypted telemetry polling.

Step-by-Step Solution

1
Analyze the compliance requirements for device telemetry and polling.
The requirements demand both cryptographic authentication of polling entities and privacy (encryption) for performance metrics payloads.
Ensuring both features prevents unauthorized device polling and passive interception of network state metrics.
2
Evaluate Simple Network Management Protocol (SNMP) version capabilities and security levels.
SNMPv3 introduces three distinct security models: noAuthNoPriv (no authentication, no encryption), authNoPriv (HMAC authentication without encryption), and authPriv (HMAC authentication with symmetric encryption such as AES).
Only authPriv fulfills both mandatory criteria of authentication and privacy.
3
Verify the default transport protocol and port for SNMP polling.
Standard SNMP queries operate using UDP as the transport protocol on port 161.
UDP reduces transmission overhead and latency for high-frequency performance metrics polling compared to connection-oriented TCP.

Key Concept

SNMP Security Levels for Performance Monitoring
Rate this question

Topics

Network Performance Monitoring and Metrics

More questions from this topic