200-150 · Question #167
Refer to the exhibit. Which description of the configuration is true?
The correct answer is D. Host 10.1.1.1 can access both communities.. SNMP access-list configuration determines which hosts can query specific community strings; host 10.1.1.1 has unrestricted access to all configured communities based on the exhibit.
Question
Refer to the exhibit. Which description of the configuration is true?
Exhibit
Options
- AHost 10.1.1.1.2 in the network operator group.
- BHost 10.1.1.1.2 can access both communities
- CHost 10.1.1.1 can access the ABC community only.
- DHost 10.1.1.1 can access both communities.
How the community answered
(30 responses)- A10% (3)
- B7% (2)
- C3% (1)
- D80% (24)
Why each option
SNMP access-list configuration determines which hosts can query specific community strings; host 10.1.1.1 has unrestricted access to all configured communities based on the exhibit.
The exhibit places host 10.1.1.2 in the network operator group, not 10.1.1.1; this choice incorrectly swaps the host addresses.
Host 10.1.1.2 has its access restricted by its group membership, limiting it to specific communities rather than both.
Host 10.1.1.1 is not constrained to only the ABC community; its configuration in the exhibit permits access to both communities.
Host 10.1.1.1 is not restricted by an ACL to a single community string, meaning the SNMP configuration grants it access to both the configured read-only and read-write communities. When no per-community ACL restriction is applied to a specific host, it can query any community whose string it knows.
Concept tested: SNMP community string access control list binding
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/snmp/configuration/xe-16/snmp-xe-16-book/nm-snmp-cfg-snmp-support.html
Topics
Community Discussion
No community discussion yet for this question.
