Examkin

Soru

Zorluk: KolayNetwork Performance Monitoring and Metrics

A network administrator is deploying a performance monitoring solution to track switch CPU and memory utilization across a enterprise network. The solution must support encrypted management traffic and allow standard polling queries to pass through internal firewalls. Which of the following configurations and protocols should the administrator implement? (Select TWO)

  1. Configure SNMPv3 using the authPriv security level to ensure data encryption and authentication.Cevap
  2. Permit UDP port 161 on internal firewalls to allow SNMP polling traffic between the manager and agents.Cevap
  3. C
    Configure SNMPv2c with read-only community strings to provide payload encryption across the network.
  4. D
    Permit TCP port 23 on firewalls to transport encrypted SNMP performance metrics.

Cevap

The administrator should configure SNMPv3 with authPriv for encrypted payload transmission and permit UDP port 161 on internal firewalls for standard SNMP agent polling.
Selecting SNMPv3 with the authPriv security level satisfies the requirement for payload encryption and message integrity. Allowing UDP port 161 on intermediate firewalls enables the central monitoring system to issue SNMP GET and SET requests to network switches.

Adım Adım Çözüm

1
Identify the SNMP version and security level that provides payload encryption.
SNMPv3 with the authPriv setting provides both authentication and privacy (AES encryption).
Security compliance requires encrypted telemetry data in transit, which earlier SNMP versions cannot provide.
2
Determine the transport protocol and port number required for standard SNMP polling requests.
SNMP queries use UDP port 161.
Firewall rules must permit UDP port 161 traffic from the NMS to monitored switch agents.

Anahtar Kavram

SNMPv3 Security Levels and Port Operations
Bu soruyu puanla

Konular

Network Performance Monitoring and Metrics

Bu konudan daha fazla soru