A network operations team is auditing the event management and polling security parameters on core routers to meet strict regulatory compliance mandates. The regulatory framework requires two key controls: all remote system logging messages must be delivered using a connection-oriented protocol that guarantees transport-layer encryption, and all telemetry polling performed by network management stations must enforce both cryptographic user authentication and packet payload encryption.
Which of the following configuration steps must the administrator perform to satisfy these auditing mandates? (Select TWO.)
- Configure Syslog forwarding to use TCP port 6514 with Transport Layer Security (TLS) encapsulation.Cevap
- Configure SNMPv3 polling using the authPriv security level.Cevap
- CConfigure Syslog forwarding to use UDP port 514 with explicit administrative logging facility privileges.
- DConfigure SNMPv3 polling using the authNoPriv security level paired with standard community strings.
Cevap
The administrator must enable Syslog forwarding over TCP port 6514 with TLS encapsulation and configure SNMPv3 using the authPriv security level.
Enabling Syslog over TCP port 6514 with TLS encapsulation satisfies the requirement for connection-oriented, encrypted system log transport. Configuring SNMPv3 with the authPriv security level satisfies the requirement for authenticated and encrypted network telemetry polling.
Adım Adım Çözüm
Anahtar Kavram
Secure Network Logging (Syslog over TLS) and SNMPv3 Security Models (authPriv)