Soru

Zorluk: OrtaNetwork Logging and Auditing

A network engineer is upgrading an enterprise log auditing and monitoring infrastructure. Corporate compliance policies require that all network event logs sent to the central server, as well as SNMP polling traffic, provide confidentiality and integrity verification in transit. Which of the following configuration choices should the engineer implement to fulfill these security requirements? (Select TWO.)

  1. Encapsulate Syslog traffic using Transport Layer Security (TLS) over TCP port 6514.Cevap
  2. Configure SNMPv3 using the authPriv security level for remote device monitoring.Cevap
  3. C
    Configure standard Syslog over UDP port 514 to enable transport encryption with minimal network latency.
  4. D
    Configure SNMPv2c using complex community strings to cryptographically encrypt administrative polling packets.

Cevap

The secure configuration requires using Syslog over TLS (TCP port 6514) and configuring SNMPv3 with the authPriv security level.
Securing log messages and network telemetry in transit requires protocols that support cryptographic encryption and message integrity. Encapsulating Syslog via TLS over TCP port 6514 secures log records from unauthorized interception. For SNMP polling, SNMPv3 under the authPriv security model ensures authentication and payload encryption.

Adım Adım Çözüm

1
Evaluate secure Syslog transport protocols
Standard Syslog over UDP port 514 transmits messages in unencrypted plaintext. Secure log aggregation requires Syslog over TLS using TCP port 6514.
Compliance policies demand encryption and tamper-evident transport for event logs.
2
Evaluate SNMP versions and security levels
SNMPv1 and SNMPv2c use cleartext community strings without payload encryption. SNMPv3 with authPriv provides both authentication and privacy (encryption).
authPriv satisfies both confidentiality and integrity requirements for SNMP telemetry.

Anahtar Kavram

Secure Network Logging and SNMP Audit Protocols
Bu soruyu puanla