Examkin

Soru

Zorluk: OrtaCIA Triad & Core Security Concepts

A network administrator is configuring remote monitoring across an untrusted WAN link to collect system metrics and notifications from branch office switches. The administrator must implement a security solution that ensures monitoring credentials and packet payloads remain encrypted for confidentiality, while also verifying packet integrity and authenticating the transmitting switch. Which of the following protocol configurations best satisfies these security requirements?

  1. SNMPv3 configured with AuthPriv modeCevap
  2. B
    SNMPv2c configured with complex read-write community strings
  3. C
    SNMPv1 configured with IP-based Access Control Lists on the monitoring server
  4. D
    SNMPv3 configured with AuthNoPriv over TCP port 161

Cevap

SNMPv3 configured with AuthPriv mode provides both authentication/integrity and payload encryption for confidentiality.
SNMPv3 AuthPriv (Authentication and Privacy) is the only option that addresses confidentiality, integrity, and authentication simultaneously by combining cryptographic hashing for message integrity and sender authentication with symmetric encryption (such as AES) for payload confidentiality.

Adım Adım Çözüm

1
Analyze the security requirements specified in the scenario
Identified the need for Confidentiality (payload encryption), Integrity (detecting alterations), and Authentication (verifying sender origin).
Security controls within the CIA triad must be mapped directly to protocol capabilities.
2
Evaluate the security modes of network management protocols
SNMPv3 offers three security levels: NoAuthNoPriv (no security), AuthNoPriv (authentication and integrity via MD5/SHA, no encryption), and AuthPriv (authentication, integrity, and privacy/encryption via AES/DES).
Selecting AuthPriv guarantees all required elements of confidentiality, authentication, and integrity.

Anahtar Kavram

CIA Triad Application in Network Management Protocols
Bu soruyu puanla

Konular

CIA Triad & Core Security Concepts

Bu konudan daha fazla soru