Examkin

Soru

Zorluk: OrtaSNMP Operations, MIBs, Traps, Informs, and Version Differences

A network administrator notices that critical link failure notifications sent from an edge router to the central Network Management System (NMS) are periodically dropped during high WAN congestion without any alert being logged by the NMS. The enterprise security policy requires all network telemetry notifications to support delivery receipts and enforce both cryptographic authentication and data encryption. Which configuration approach on the Cisco IOS router meets these operational and security requirements?

  1. Configure SNMPv3 Informs using the authPriv security level.Cevap
  2. B
    Configure SNMPv3 Traps using the authPriv security level.
  3. C
    Configure SNMPv2c Informs with a read-write community string using TCP port 162.
  4. D
    Configure SNMPv3 Informs using the authNoPriv security level.

Cevap

Configure SNMPv3 Informs using the authPriv security level.
SNMP Informs fulfill the reliability requirement by requiring the receiving Network Management System (NMS) to acknowledge receipt, retransmitting the message if no acknowledgment is received. Pairing Informs with the SNMPv3 authPriv security level ensures both authentication of the manager/agent and encryption of transmitted notification data, meeting all listed requirements.

Adım Adım Çözüm

1
Analyze notification reliability requirements
Identified the need for acknowledged notifications (Informs rather than Traps).
Traps are unacknowledged UDP messages that offer no delivery confirmation. Informs require the NMS to reply with an SNMP response PDU, retrying transmission if no confirmation is received within a timeout period.
2
Analyze security model requirements
Identified the need for the authPriv security model in SNMPv3.
authPriv provides both cryptographic authentication (MD5/SHA) and encryption (DES/AES). noAuthNoPriv provides no security, authNoPriv provides authentication without encryption, and SNMPv2c uses cleartext community strings.

Anahtar Kavram

SNMP Inform operational mechanics vs Traps and SNMPv3 security levels (authPriv)
Bu soruyu puanla

Konular

SNMP Operations, MIBs, Traps, Informs, and Version Differences

Bu konudan daha fazla soru