Examkin

Soru

Zorluk: ZorNetwork Logging and Auditing

A network administrator is upgrading an enterprise monitoring infrastructure to comply with strict auditing standards. The current deployment experiences dropped log packets across congested WAN links and fails security audits due to cleartext management traffic across untrusted boundaries. Which protocol and transport configuration best satisfies the requirements for reliable, cryptographically protected log aggregation and secure device polling?

  1. Configure Syslog using TCP port 6514 with TLS framing for event logs, and implement SNMPv3 with the authPriv security level for device polling.Cevap
  2. B
    Configure Syslog using TCP port 6514 with TLS framing for event logs, and implement SNMPv3 with the authNoPriv security level for device polling.
  3. C
    Configure Syslog using UDP port 514 with TLS framing for event logs, and implement SNMPv3 with the authPriv security level for device polling.
  4. D
    Configure Syslog using UDP port 6514 with TLS framing for event logs, and implement SNMPv2c with pre-shared keys for device polling.

Cevap

Configure Syslog using TCP port 6514 with TLS framing for event logs, and implement SNMPv3 with the authPriv security level for device polling.
The correct response pair combines TCP port 6514 for Syslog over TLS with SNMPv3 running at the authPriv security level. Syslog over TLS uses TCP to guarantee log transmission across lossy or congested links while encrypting log contents. SNMPv3 authPriv enforces both cryptographic user authentication and payload privacy (encryption), fully satisfying the auditing and security objectives.

Adım Adım Çözüm

1
Analyze transport reliability requirements for log aggregation
UDP Syslog (port 514) is connectionless and prone to packet drops during congestion; TCP provides reliable transport, while TCP port 6514 standardizes secure Syslog over TLS.
Meeting compliance requires guaranteed delivery and confidentiality across untrusted WAN links.
2
Evaluate SNMP security models for secure device auditing
SNMPv3 offers three security levels: noAuthNoPriv (no auth/privacy), authNoPriv (auth without encryption), and authPriv (both auth and encryption).
Only authPriv ensures that polled device data and configuration parameters are encrypted over the network.
3
Synthesize the protocol requirements
The target deployment must use Syslog over TCP port 6514 (TLS) alongside SNMPv3 configured with authPriv.
This combination guarantees both reliable, encrypted log transport and fully encrypted polling.

Anahtar Kavram

Secure Network Logging & Auditing Protocols (Syslog TLS & SNMPv3 Security Levels)
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Network Logging and Auditing

Bu konudan daha fazla soru