Examkin

Soru

Zorluk: OrtaNetwork Device Hardening Best Practices

A network administrator needs to enable centralized remote monitoring on core network switches. The corporate security baseline mandates that management traffic must enforce both cryptographic user authentication and encryption (privacy) of transmitted payload data across the management network. Which SNMP configuration should the administrator implement to satisfy these security requirements?

  1. SNMPv3 using the authPriv security levelCevap
  2. B
    SNMPv3 using the authNoPriv security level
  3. C
    SNMPv2c using read-only community strings
  4. D
    SNMPv1 configured to operate over TCP port 22

Cevap

SNMPv3 using the authPriv security level
To satisfy requirements for both authentication and encryption of management data, SNMPv3 must be deployed using the authPriv (Authentication with Privacy) security level. This mode authenticates communication using algorithms such as SHA/MD5 and encrypts management payloads using AES or DES.

Adım Adım Çözüm

1
Identify security policy requirements
Requirements are dual-fold: cryptographic authentication and privacy (encryption).
Hardening best practices dictate matching the exact security level supported by management protocols.
2
Evaluate SNMP version capabilities
SNMPv1 and SNMPv2c lack native cryptographic encryption; only SNMPv3 supports configurable security levels.
Legacy SNMP versions send community strings and data in cleartext.
3
Select the appropriate SNMPv3 security level
Select authPriv mode.
noAuthNoPriv offers no authentication/privacy, authNoPriv offers authentication without privacy, while authPriv provides both authentication and data encryption.

Anahtar Kavram

SNMP Protocol Hardening and Security Levels
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Network Device Hardening Best Practices

Bu konudan daha fazla soru