Examkin

Question

Difficulty: EasyNetwork Performance Monitoring and Metrics

A network administrator is deploying a performance monitoring solution to track switch CPU and memory utilization across a enterprise network. The solution must support encrypted management traffic and allow standard polling queries to pass through internal firewalls. Which of the following configurations and protocols should the administrator implement? (Select TWO)

  1. Configure SNMPv3 using the authPriv security level to ensure data encryption and authentication.Answer
  2. Permit UDP port 161 on internal firewalls to allow SNMP polling traffic between the manager and agents.Answer
  3. C
    Configure SNMPv2c with read-only community strings to provide payload encryption across the network.
  4. D
    Permit TCP port 23 on firewalls to transport encrypted SNMP performance metrics.

Answer

The administrator should configure SNMPv3 with authPriv for encrypted payload transmission and permit UDP port 161 on internal firewalls for standard SNMP agent polling.
Selecting SNMPv3 with the authPriv security level satisfies the requirement for payload encryption and message integrity. Allowing UDP port 161 on intermediate firewalls enables the central monitoring system to issue SNMP GET and SET requests to network switches.

Step-by-Step Solution

1
Identify the SNMP version and security level that provides payload encryption.
SNMPv3 with the authPriv setting provides both authentication and privacy (AES encryption).
Security compliance requires encrypted telemetry data in transit, which earlier SNMP versions cannot provide.
2
Determine the transport protocol and port number required for standard SNMP polling requests.
SNMP queries use UDP port 161.
Firewall rules must permit UDP port 161 traffic from the NMS to monitored switch agents.

Key Concept

SNMPv3 Security Levels and Port Operations
Rate this question

Topics

Network Performance Monitoring and Metrics

More questions from this topic