Question

Difficulty: EasyNetwork Performance Monitoring and Metrics

A network administrator needs to monitor performance metrics on core switches while ensuring that all polling traffic is authenticated and payload data is encrypted across the network. Which of the following SNMP configurations should the administrator deploy?

  1. SNMPv3 with authPriv security levelAnswer
  2. B
    SNMPv2c with a read-only community string
  3. C
    SNMPv3 with noAuthNoPriv security level
  4. D
    SNMPv1 using TCP port 161 for encrypted polling

Answer

SNMPv3 with authPriv security level
SNMPv3 with the authPriv security level meets both requirements by utilizing cryptographic authentication along with payload encryption.

Step-by-Step Solution

1
Identify the security requirements for network performance monitoring.
The requirement mandates both authentication and payload encryption for monitoring traffic.
Unencrypted polling traffic exposes sensitive system OIDs and operational data to network eavesdropping.
2
Select the SNMP version and security mode that satisfies both requirements.
SNMPv3 with authPriv provides cryptographic user authentication (such as SHA) and data privacy (such as AES encryption).
SNMPv1 and SNMPv2c lack cryptographic protection, and lower SNMPv3 security levels do not encrypt the data payload.

Key Concept

SNMP Security Levels and Versions
Rate this question