Examkin

Question

Difficulty: EasyNetwork Performance Monitoring and Metrics

A network administrator is establishing performance monitoring on core network equipment and must satisfy a corporate security compliance policy requiring both cryptographic authentication and payload encryption for all device status polling. Which SNMP configuration mode must be implemented on the network devices to meet these requirements?

  1. SNMPv3 using the authPriv security levelAnswer
  2. B
    SNMPv3 using the authNoPriv security level
  3. C
    SNMPv2c using a read-only community string
  4. D
    SNMPv1 using community strings over UDP port 161

Answer

SNMPv3 using the authPriv security level
SNMPv3 introduces security models that support authentication and encryption. The authPriv (Authentication and Privacy) level provides message authentication via HMAC-MD5 or HMAC-SHA and payload confidentiality using symmetric encryption algorithms such as AES or DES.

Step-by-Step Solution

1
Identify the security requirements stated in the policy
The policy mandates both authentication (verifying source identity) and payload privacy (encrypting traffic data).
Security levels determine whether authentication, encryption, or both are applied to SNMP polling traffic.
2
Evaluate the capabilities of SNMP versions and security levels
SNMPv1 and SNMPv2c use cleartext community strings without payload encryption. SNMPv3 defines three security levels: noAuthNoPriv (no auth, no encryption), authNoPriv (auth, no encryption), and authPriv (auth and encryption).
Only authPriv inside SNMPv3 fulfills both requirements simultaneously.

Key Concept

SNMPv3 Security Levels (noAuthNoPriv, authNoPriv, authPriv)
Estimated Time:45s
Rate this question

Topics

Network Performance Monitoring and Metrics

More questions from this topic