Examkin

Question

Difficulty: Very hardNetwork Performance Monitoring and Metrics

An enterprise network architect is designing a comprehensive monitoring strategy for a multi-site WAN deployment. The solution must provide secure, continuous device health monitoring, granular flow visibility for bandwidth utilization analysis, and ensure compliance with strict zero-trust cryptographic requirements. Which of the following technical configurations and protocols should the architect deploy to satisfy these operational requirements? (Select TWO).

  1. Deploy SNMPv3 configured with the authPriv security level using SHA-256 for authentication and AES-256 for payload encryption.Answer
  2. Export IPFIX or NetFlow v9 records from WAN edge routers to a centralized collector to evaluate traffic volumes, top talkers, and protocol distribution.Answer
  3. C
    Configure SNMPv2c using read-only community strings transported over TCP port 161 to ensure reliable delivery of polling data across lossy links.
  4. D
    Configure Syslog daemons listening on UDP port 162 to actively poll interface throughput counters and calculate real-time packet loss metrics.

Answer

The architect should deploy SNMPv3 configured with authPriv (SHA/AES) for secure management polling and export IPFIX/NetFlow records for granular flow visibility.
Combining SNMPv3 with authPriv security ensures that device metrics and system health indicators are queried with cryptographic authentication (SHA-256) and payload privacy (AES-256). Supplementing SNMP polling with IPFIX/NetFlow protocol exports enables full-stack traffic flow analysis, identifying granular bandwidth consumption without subjecting network management data to cleartext interception.

Step-by-Step Solution

1
Analyze security and monitoring requirements
Identified the need for encrypted device management queries (zero-trust compliance) and flow-level bandwidth statistics.
SNMPv3 authPriv meets the cryptographic standard by providing authentication and payload encryption, unlike SNMPv1 or SNMPv2c.
2
Evaluate flow monitoring mechanisms for traffic statistics
Selected IPFIX/NetFlow export to track top talkers and link utilization.
Flow protocols analyze packet headers to report traffic volume by IP address, port, and protocol.
3
Identify misconfigurations and incorrect protocol roles in remaining choices
Eliminated SNMPv2c due to plain-text transmission and TCP transport misclassification; eliminated Syslog due to port/protocol role mismatch.
SNMP uses UDP port 161 for polling; Syslog uses UDP port 514 for message logging and cannot actively poll interface counters.

Key Concept

Enterprise Network Performance Monitoring Frameworks
Rate this question

Topics

Network Performance Monitoring and Metrics

More questions from this topic