An enterprise network engineering team is designing a high-security log forwarding and auditing infrastructure across multi-site edge routers. The compliance policy mandates that event log forwarding to the centralized SIEM must guarantee transport reliability and payload encryption, while active remote device telemetry queries must enforce both cryptographic user authentication and data payload privacy encryption. Which of the following configuration choices and protocols satisfy these requirement criteria? (Select TWO.)
- Forward Syslog events using TCP port 6514 encapsulated with Transport Layer Security (TLS)Cevap
- Configure SNMPv3 polling and trap generation using the authPriv security modelCevap
- CForward Syslog events using UDP port 514 with native TLS session renegotiation
- DConfigure SNMPv3 polling using the authNoPriv security level to encrypt telemetry data without credential overhead
Cevap
The correct configurations are forwarding Syslog events over TCP port 6514 using TLS encapsulation, and implementing SNMPv3 using the authPriv security model.
Secure log aggregation requiring encrypted and reliable transport must use Syslog over TLS on TCP port 6514. Device telemetry requiring both authentication and encryption mandates SNMPv3 at the authPriv security level.
Adım Adım Çözüm
Anahtar Kavram
Secure Logging and SNMP Security Models