Examkin

Soru

Zorluk: KolayNetwork Performance Monitoring and Metrics

A network administrator is establishing performance monitoring on core network equipment and must satisfy a corporate security compliance policy requiring both cryptographic authentication and payload encryption for all device status polling. Which SNMP configuration mode must be implemented on the network devices to meet these requirements?

  1. SNMPv3 using the authPriv security levelCevap
  2. B
    SNMPv3 using the authNoPriv security level
  3. C
    SNMPv2c using a read-only community string
  4. D
    SNMPv1 using community strings over UDP port 161

Cevap

SNMPv3 using the authPriv security level
SNMPv3 introduces security models that support authentication and encryption. The authPriv (Authentication and Privacy) level provides message authentication via HMAC-MD5 or HMAC-SHA and payload confidentiality using symmetric encryption algorithms such as AES or DES.

Adım Adım Çözüm

1
Identify the security requirements stated in the policy
The policy mandates both authentication (verifying source identity) and payload privacy (encrypting traffic data).
Security levels determine whether authentication, encryption, or both are applied to SNMP polling traffic.
2
Evaluate the capabilities of SNMP versions and security levels
SNMPv1 and SNMPv2c use cleartext community strings without payload encryption. SNMPv3 defines three security levels: noAuthNoPriv (no auth, no encryption), authNoPriv (auth, no encryption), and authPriv (auth and encryption).
Only authPriv inside SNMPv3 fulfills both requirements simultaneously.

Anahtar Kavram

SNMPv3 Security Levels (noAuthNoPriv, authNoPriv, authPriv)
Tahmini Süre:45s
Bu soruyu puanla

Konular

Network Performance Monitoring and Metrics

Bu konudan daha fazla soru