Examkin

Soru

Zorluk: OrtaSNMP Operations, MIBs, Traps, Informs, and Version Differences

A network engineer is auditing telemetry configurations across enterprise routers and switches. Security policy mandates that management telemetry must ensure packet privacy (encryption) and data integrity. Additionally, firewall rules must be verified to allow SNMP traffic between managed devices and the central Network Management System (NMS). Which two statements accurately describe the SNMP operational mechanics and security settings required to satisfy these requirements? (Select two.)

  1. The authPriv security model in SNMPv3 must be enabled to provide both message authentication and packet payload encryption.Cevap
  2. B
    SNMP Inform notifications are sent without requiring confirmation from the receiver, reducing transmission overhead compared to Traps.
  3. The Network Management System receives unsolicited SNMP Traps and Informs on UDP port 162.Cevap
  4. D
    Managed network agents listen on UDP port 162 to process incoming SNMP GetRequest and SetRequest messages from the management server.

Cevap

The statements confirming that SNMPv3 authPriv provides both authentication and encryption, and that the NMS receives Traps and Informs on UDP port 162, are correct.
The authPriv security level in SNMPv3 delivers both authentication and encryption for management traffic. Unsolicited notifications (Traps and Informs) generated by managed agents are sent to UDP port 162 on the management station.

Adım Adım Çözüm

1
Analyze SNMPv3 security levels to meet policy mandates.
SNMPv3 defines three security levels: noAuthNoPriv (no authentication, no encryption), authNoPriv (authentication via SHA/MD5, no encryption), and authPriv (authentication via SHA/MD5 plus encryption via AES/DES). To meet privacy/encryption mandates, authPriv is required.
The security policy explicitly mandates payload privacy (encryption) along with authentication.
2
Verify SNMP transport port assignments for agent polling versus notification traffic.
Managed SNMP agents listen on UDP port 161 to receive request PDUs (GetRequest, GetNextRequest, SetRequest). The NMS listens on UDP port 162 to receive unsolicited notification PDUs (Traps and Informs).
Correct firewall rules require distinguishing port 161 for agent polling from port 162 for NMS notification reception.
3
Compare Trap and Inform operational mechanics.
Traps are unacknowledged UDP messages, whereas Informs require the receiving NMS to acknowledge receipt by returning a Response PDU.
Confusing Informs with unacknowledged notifications reverses their reliability mechanisms.

Anahtar Kavram

SNMP Security Levels and UDP Port Mechanics
Bu soruyu puanla

Konular

SNMP Operations, MIBs, Traps, Informs, and Version Differences

Bu konudan daha fazla soru