A network engineer is upgrading an enterprise log auditing and monitoring infrastructure. Corporate compliance policies require that all network event logs sent to the central server, as well as SNMP polling traffic, provide confidentiality and integrity verification in transit. Which of the following configuration choices should the engineer implement to fulfill these security requirements? (Select TWO.)
- Encapsulate Syslog traffic using Transport Layer Security (TLS) over TCP port 6514.Cevap
- Configure SNMPv3 using the authPriv security level for remote device monitoring.Cevap
- CConfigure standard Syslog over UDP port 514 to enable transport encryption with minimal network latency.
- DConfigure SNMPv2c using complex community strings to cryptographically encrypt administrative polling packets.
Cevap
The secure configuration requires using Syslog over TLS (TCP port 6514) and configuring SNMPv3 with the authPriv security level.
Securing log messages and network telemetry in transit requires protocols that support cryptographic encryption and message integrity. Encapsulating Syslog via TLS over TCP port 6514 secures log records from unauthorized interception. For SNMP polling, SNMPv3 under the authPriv security model ensures authentication and payload encryption.
Adım Adım Çözüm
Anahtar Kavram
Secure Network Logging and SNMP Audit Protocols