A network engineer is establishing a telemetry and metric collection framework across core switches over an unencrypted management network segment. The solution must support cryptographic authentication and payload encryption for device health polling, as well as low-overhead flow statistics collection for monitoring bandwidth usage across interfaces. Which of the following protocol configurations should the engineer implement? (Select TWO.)
- SNMPv3 configured with the authPriv security level for polling core device health and metric status.Answer
- IPFIX using UDP transport to export flow statistics and bandwidth utilization metrics.Answer
- CSNMPv2c configured with read-only community strings to encrypt metric payloads transmitted to the monitoring system.
- DSNMPv3 configured over TCP port 162 to enable connection-oriented transport for regular agent polling queries.
Answer
The engineer should implement SNMPv3 with authPriv security level for polling device health and metrics, and IPFIX over UDP transport for exporting flow-level bandwidth statistics.
Selecting SNMPv3 with authPriv ensures that device management metrics and authentication credentials are encrypted using modern algorithms (such as AES) over untrusted links. Concurrently, using IPFIX over UDP provides low-overhead flow telemetry for capturing traffic metrics across switch interfaces without imposing heavy TCP session management costs.
Step-by-Step Solution
Key Concept
Network Performance Monitoring and Telemetry Protocols
Estimated Time:1m 30s