Examkin

Question

Difficulty: EasyNetwork Performance Monitoring and Metrics

A network technician is setting up SNMPv3 on a managed switch to send performance monitoring data securely to a network management server using the authPriv security level. Which TWO of the following algorithms or features must be enabled to satisfy the requirements of this specific security level? (Select TWO.)

  1. Secure Hash Algorithm (SHA) for data authentication and integrityAnswer
  2. Advanced Encryption Standard (AES) for payload privacy and encryptionAnswer
  3. C
    Read-only community strings for unencrypted password validation
  4. D
    TCP port 23 to establish a connection-oriented monitoring session

Answer

Secure Hash Algorithm (SHA) for data authentication and Advanced Encryption Standard (AES) for payload encryption.
The SNMPv3 authPriv mode requires both authentication and encryption. Secure Hash Algorithm (SHA) provides user authentication and data integrity, while Advanced Encryption Standard (AES) provides packet payload confidentiality through encryption.

Step-by-Step Solution

1
Identify the requirements of the SNMPv3 authPriv security level.
The authPriv (Authentication and Privacy) level mandates both user authentication and payload encryption.
SNMPv3 defines three security levels: noAuthNoPriv (no security), authNoPriv (authentication without encryption), and authPriv (both authentication and encryption).
2
Select the appropriate authentication protocol.
Secure Hash Algorithm (SHA) or Message Digest 5 (MD5) satisfies the authentication requirement.
Hashing algorithms provide cryptographic verification of data origin and integrity.
3
Select the appropriate privacy/encryption protocol.
Advanced Encryption Standard (AES) or Data Encryption Standard (DES) satisfies the privacy requirement.
Symmetric encryption algorithms encrypt the packet payload to prevent eavesdropping.

Key Concept

SNMPv3 Security Levels (authPriv)
Rate this question

Topics

Network Performance Monitoring and Metrics

More questions from this topic