Examkin

Soru

Zorluk: OrtaNetwork Logging and Auditing

A network administrator is updating the telemetry and auditing configuration across core switch infrastructure to adhere to security compliance standards. The compliance policy mandates that all remote device management queries must provide cryptographic authentication and payload privacy, and that system log messages must be securely forwarded to a central server using a reliable, encrypted transport protocol. Which TWO of the following configurations should the administrator implement to satisfy these mandates? (Select TWO)

  1. Enable SNMPv3 using the authPriv security level for device polling and monitoring.Cevap
  2. Configure Syslog log forwarding using Transport Layer Security (TLS) over TCP port 6514.Cevap
  3. C
    Enable SNMPv3 using the authNoPriv security level to encrypt management data traffic.
  4. D
    Configure Syslog log forwarding using Transport Layer Security (TLS) over UDP port 514.

Cevap

The administrator must implement SNMPv3 with the authPriv security level to ensure payload encryption and authentication for device management queries, and configure Syslog log forwarding using TLS over TCP port 6514 for secure and reliable log transmission.
Enabling SNMPv3 with the authPriv mode satisfies the mandate for administrative query privacy because authPriv adds payload encryption in addition to authentication. Configuring Syslog forwarding over TCP port 6514 using TLS satisfies the requirement for encrypted, reliable log transfer to the central repository.

Adım Adım Çözüm

1
Evaluate the security requirement for management queries.
Identified that cryptographic authentication and payload privacy require SNMPv3 authPriv.
SNMPv1 and SNMPv2c send community strings in plaintext. In SNMPv3, noAuthNoPriv provides no security, authNoPriv authenticates without encrypting data, and authPriv provides both authentication and privacy (encryption).
2
Evaluate the requirement for log message transport encryption and reliability.
Identified that Syslog over TCP 6514 with TLS provides encrypted, reliable log transport.
Traditional Syslog uses unencrypted UDP port 514, which lacks transport reliability and payload security. RFC 5425 specifies TLS over TCP port 6514 to secure Syslog communications with connection reliability.

Anahtar Kavram

Secure Network Logging and Device Monitoring Protocols
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Network Logging and Auditing

Bu konudan daha fazla soru